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Abstract 

This paper is the second part of an introduction to linear logic and ludics, both due to Girard. 
It is devoted to proof nets, in the limited, yet central, framework of multiplicative linear logic 
(section and to ludics, which has been recently developped in an aim of further unveiling the 
fundamental interactive nature of computation and logic (sections |21 El El and |3 . We hope to 
offer a few computer science insights into this new theory. 

Keywords: Cut-elimination (03F05), Linear logic (03F52), Logic in computer science (03B70), In- 
teractive modes of computation (68Q10), Semantics (68Q55), Programming languages (68N15). 

Prerequisites 

This part depends mostly on the first two sections of part I, and should therefore be accessible to any 
one who has been exposed to the very first steps of linear logic. We have used the following sources: 
ISniEniEHI for proof nets, and and j^ESj for ludics. 

1 Proof nets 

Proof nets are graphs that give a more economical presentation of proofs, abstracting from some 
irrelevant order of application of the rules of linear logic given in sequent calculus style (sections 2 
and 3 of part I) . We limit ourselves here to multiplicative linear logic (MLL) , and we shall even begin 
with cut-free MLL. Proof nets for MLL are graphs which are "almost trees" , and we stress this by our 
choice of presentation. We invite the reader to draw proof nets by himself while reading the section. 

What plays here the role of a proof of a sequent \- Ai, . . . , An is the forest of the formulas Ai, . . . , An 
represented as trees, together with a partition of the leaves of the forest in pairs (corresponding to 
the application of an axiom h C,C^). Well, not quite. A proof may not decompose each formula 
completely, since an axiom h C, can be applied to any formula. Hence we have to specify partial 
trees for the formulas Ai , . . . , An ■ One way to do this is to specify the set of leaves of each partial 
tree as a set of (pairwise disjoint) occurrences. Formally, an occurrence is a word over {1, 2}, and the 
subformula A/u at occurrence u is defined by the following formal system: 

A/e^A {Ai® A2)llu= {Ai-^A2)llu^ Ai/u {A^® A2)l2u= {Ay^A-2)l2u = A-iju . 
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A partAal formula tree A'-' consists of a formula A together with a set U of pairwise disjoint occurrences 
such that {Wu € U A/u is defined). Recall that a partition of a set E is a set X of non-empty subsets 
of E which are pairwise disjoint and whose union is E. If X = {Yi, . . . ,Yn} we often simply write 

X = Yu...,Yn. 

Definition 1.1 A proof structure is given by 

where {A^^ , . . . is a multiset of partial formula trees and where X is a partition of {Ai/u \ 

u G U\\ U . . . U {An/u I u e Un} (disjoint union) whose classes are pairs of dual formulas. We shall 
say that each class of the partition is an axiom of the proof structure, and that Ai,. . . ,An are the 

conclusions of the proof structure. 

More generally, we shall manipulate graphs described as a forest plus a partition of its leaves, with- 
out any particular requirement on the partition. This notion is faithful to Girard's idea of paraproof, 
discussed in the next section. 

Definition 1.2 A paraproof structure is given by . . . , where X is a partition of 

{Ai/u I 21 G J7i} U ... U {An/u I u G U„} (disjoint union) . We shall say that each class of the 
partition is a generalized axiom , or daimon ( anticipating on a terminology introduced in the following 
section), and that Ai,. . . ,An are the conclusions of the paraproof structure. 

The actual graph associated to this description is obtained by: 

• drawing the trees of the formulas Ai,. . . ,An stopping at Ui, . . . ,Un, respectively (i.e., there is 
a node corresponding to each subformula Ai/u, where u <Ui for some w, e Ui); and 

• associating a new node with each class of the partition and new edges from the new node to 
each of the leaves of the class (in the case of proof structures, one can dispense with the new 
node, and draw an edge between the matching dual formulas - such edges are usually drawn 
horizontally). 

We next describe how to associate a proof structure with a proof. The following definition follows 
the rules of MLL. 

Definition 1.3 The sequentializable proof structures for (cut-free) MLL are the proof structures ob- 
tained by the following rules: 

{<S...,A^,B^,C7^}[X] 

{C^^\ (C^)i^>}[{{C, C^}}] {A^l^ A^-,{B'^cr}[X] 

{A^\..., A^n , By}[X] {^'f ^ , . . . , A'l? , C^}[Y] 

{Af ^ , . . . , , yl'f ^ , . . . , yl'^f ' ,{B®C)^}[XUY] 
where U = {Iv \v€V}[J {2w | w £ W}. Sequentializable proof structures are called proof nets. 
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It should be clear that there is a bijcctive correspondence between MLL proofs and the proofs 
of sequentialization. Let us check one direction. We show that if a proof structure with conclu- 
sions Ai, . . . ,An is sequentializable, then a proof that it is so yields an MLL proof of the sequent 

\- Ai, . . . , An- This is easily seen by induction: the proof associated with {C^">, {C-^)^''i}[{{C, C-^}}] 
is the axiom h C, C^, while the last steps of the proofs associated with {A^S • • • i^n") (-B'S'C)^}[X] 
and {Af 1 , . . . , A^" , A'"^ A'^'" , {B ® C)^}[X] are, respectively: 

h Ai,...,A„,B,C hAi,...,A„,B h A[,...A'^^,,C 
\-Ai,...,An, B^C I- Ai, . . . , A„, A'l, . . . , a;,, B C 

The question we shall address in the rest of the section is the following: given a proof structure, 
when is it the case that it is sequentializable? It turns out that the right level of generality for this 
question is to lift it to paraproof nets, which are defined next. 

Definition 1.4 The sequentializable paraproof structures for (cut-free) MLL are the paraproof struc- 
tures obtained by the following rules: 

{A';\...,Ay-,B^,C'^}[X] 
{A\'\. . . , Ai'^}[{{A,, {Af^ , . . . , {B>^Cf}[X] 

{Af ^ ,...,A^-,B^}[X] { A'^^V . . , A'^f ' , C^}[Y] 

{A'^\...,Ali'^,Af,...,A''^f,{B^Cr}[XuY] 

where U = {Iv \ v & V}U {2w \ w e W}. Sequentializable paraproof structures are called paraproof 
nets. 

What is the proof-theoretic meaning of a paraproof net? Well, the above bijective correspon- 
dence extends to a correspondence between sequentialization proofs of paraproof structures and MLL 
paraproof s, which are defined by the following rules: 

\-Ti,B hT2,C hT,B,C 

hr hTi,T2,B(g,C hT,B>9C 

where in the first rule F is an arbitrary multiset of formulas. The first rule is called generalized axiom, 
or daimon rule. Starting in a proof search mode from an MLL formula A one may build absolutely 
freely a paraproof of A, making arbitrary decisions when splitting the context in a rule. Any 
choice is as good as another, in the sense that the process will be successful at the end, i.e., we shall 
eventually reach generalized ax:ioms. There is an interesting subset of paraproofs, which we call the 
extreme ones. An extreme paraproof is a paraproof in which in each application of the ® rule we have 
Fi = or r2 = 0. The following definition formalizes this notion. 

Definition 1.5 The extreme paraproof nets for (cut-free) MLL are the proof structures obtained by 
the following rules: 
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{A\'\ . . . , . . . , A„}}] {<, . . . , A^", (B'S'C)^}[X] 



{Af\...,A^",(B®c)^}[xuy] 



where U ^ {Iv \ v E V} U {2w \ w £ W}. 

Extreme paraproofs will be soon put to use, but for the time being we are concerned with general 
paraproofs. Our first tool is the notion of switching. Let S* be a paraproof stucture. A switching is a 
function from the set of all internal nodes of (the forest part of) 5 of the form Bi'^B2, to {L, R\. A 
switching induces a correction (sub)graph, defined as follows. At each internal node Bi'SB2, we cut 
exactly one of the two edges linking Bi^B2 to its immediate subformulas, namely the edge between 
Bi'^B2 and B2 if the switching is set to L, and the edge between Bi^B2 and Bi if the switching is 
set to R. The following definition is due to Danos and Regnier and arose as a simplification of 
the original criterion proposed by Girard 

Definition 1.6 (DR) We say that a paraproof stucture S satisfies the DR-criterion if all the correc- 
tion graphs induced by a switching of S are connected and acyclic (that is, are trees). 

Proposition 1.7 All sequentializable paraproof structures satisfy the DR-criterion. Moreover, in each 
correction graph, when a switch corresponding to a formula Bi'SB2 is, say, on the left, then the path 
from Bi to B2 does not go through Bi^B2. 

Proof. We proceed by induction on the definition of paraproof nets. If is a generalized axiom, 
then there is just one switching (the empty one) and the associated correction graph is the graph itself, 
which is obviously a tree. If N is obtained from A^i and A^2 by a (g) rule acting on a conclusion B of A^i 
and a conclusion C of A^2 , then a switching of A^ is a pair of a switching of A^i and a switching of A''2 . 
We know by induction that the corresponding two correction graphs are trees. We can thus organize 
them in a tree form, with roots B, C respectively. Then the correction graph for A^ is obtained by 
adding a new root and edges between the new root and B and C, respectively: this is obviously a tree. 
Finally, suppose that A^ is obtained from A^^i by a 'S' rule acting on two conclusions B and C of A^i, 
and consider a switching for A^, which assigns, say L, to the new ^ node. The rest of the switching 
determines a correction graph for A^i which is a tree by induction. We can organize the correction 
graph for A^i in such a way that B is the root. Then the correction graph for A^ is obtained by adding 
a new root and an edge between the new root and B, and this is again obviously a tree. The second 
property of the statement is obvious to check, by induction on the sequentialization proof too. □ 

Our next tool is a parsing procedure, which takes a paraproof structure and progressively shrinks 
it, or contracts it. If the procedure is not blocked, then the paraproof structure is a paraproof net. 
This criterion was first discovered by Danos \2.\\ . Guerrini explained the criterion as a successful 
parsing procedure 37 . Here we (straightforwardly) extend the procedure from proof structures to 
paraproof structures. 
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Definition 1.8 We define the following rewriting system on paraproof structures: 

A/u = Bi^B2 

{r,A^u^"i'"2>}[X,{A,Bi,i?2}] {T,A^^i-mX,{/^,{B^^B2)}] 

A/u = Bi®B2 

{r, ^C^U{nl,n2}|[^^ |^^^ ^^y^ 1^^^ A^UM}[^^ {Ai, A2, Si ® S2}] 

We say that a proof structure S — {Al(^ , • ■ ■ , } [X] satisfies the weak Parsing criterion if 

s^^p {4^>,...,4^>}[{Ai,...,A„}] 

anc? that it satisfies the strong Parsing criterion if any reduction sequence S — >p S' can be completed 
by a reduction S' -^p {A^'^ . . . , Ai'''}[{Ai, . . .,An}]. 

Lemma 1.9 If S ^p S' , and if S satisfies the DR-criterion, then S' satisfies the DR-criterion. 

Proof. Suppose that S -^p S' by the rule, and that a switching for S' has been fixed. S is the 
same graph as S' except that S has two additional vertices Bi and B2 and that the edge connecting 
Bi^B2 with its class in S' is replaced by a diamond of edges between Bi'SB2, Bi, B2, and its class 
{A, Bi, B2} in 5*. We extend the switching to S by assigning, say L, to Bi'^B2 (which is internal in 
iS*). By assumption, the correction graph is a tree. We can take B2 as a root, which has the class 
{A, Bi, B2} as unique son, which has Bi among his sons, which has Bi^B2 as unique son. Then the 
correction graph for the original switching relative to S' is obtained by collapsing B2 with {A, Bi, ^2} 
and Bi with Bi'^B2, and is still a tree. 

Suppose now that S S" by the ® rule. A switching of 5" is also a switching for 5, whose 
associated correction graph is thus a tree. Let us take Bi eg) B2 as a root. Then the correction graph 
for S' is obtained as follows: collapse Bi, its unique son {Ai,i3i}, B2, and its unique son {A2,-B2}- 
This clearly yields a tree. □ 

Proposition 1.10 If a proof structure satisfies the DR-criterion, then it satisfies the strong Parsing 
criterion. 

Proof. Let S* be a paraproof structure with conclusions Ai, . . . ,An. Clearly, each ^p reduction 
strictly decreases the size of the underlying forest, hence all reductions terminate. Let S S", 
where 5" cannot be further reduced. We know by Lemma [1.91 that S' also satisfies the DR-criterion. 
We show that S" must be a generalized axiom (which actually entails that S' must precisely be 
{jdj'^'^, . . . , . . . , An}], since the set of conclusions remains invariant under reduction). Sup- 

pose that 5' is not a generalized axiom, and consider an arbitrary class F of the partition of 5'. We 
claim that F contains at least one formula whose father is a (8) node. Indeed, otherwise, each element 
of the class is either a conclusion or a formula B whose father is a 'S' node. Note that in the latter 
case the other child of the 'S' node cannot belong to the class as otherwise S' would not be in normal 
form. If the father of B is B^C (resp. C'^B), we set its switch to R (resp. L), and we extend the 
switching arbitrarily to all the other internal 'S' nodes of S' . Then the restriction of the correction 
graph G to F and its elements forms a connected component, which is strictly included in G since 5" 
is not a generalized axiom. But then G is not connected, which is a contradiction. 
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We now construct a path in S' as follows. We start from a leaf Bi whose father is a (g) node, say 
Bi (g) C, we go down to its father and then up through C to a leaf B[, choosing a path of maximal 
length. All along the way, when we meet nodes, we set the switches in such a way that the path 
will remain in the correction graph. B[ cannot have a (8) node as father, as otherwise by maximality 
the other son C[ of this father would be a leaf too, that cannot belong to the same class as this 
would make a cycle, and cannot belong to another class because 5" is in normal form. Hence, by 
the claim, we can pick B2 different from B[ in its class whose father is a (8) node. We continue our 
path by going up from B[ to its class, and then down to -82, down to its father, and we consider 
again a maximal path upwards from there. Then this path cannot meet any previously met vertice, 
as otherwise, setting the switches in the same way as above until this happens, we would get a cycle 
in a correction graph. Hence we can reach a leaf B2 without forming a cycle, and we can continue like 
this forever. But S' is finite, which gives a contradiction. □ 

Proposition 1.11 If a paraproof structure satisfies the weak Parsing criterion, then it is sequentiali- 
zable. 

Proof. We claim that if S — >p S', then S can be obtained from S' by replacing each generalized 
axiom of S' by an appropriate paraproof net. We proceed by induction on the length of the derivation. 
In the base case, we have S' = S, and we replace each generalized axiom by itself. Suppose that 
S —+P S'l S'. We use the notation of Definition II. 81 Suppose that S'l — >p S" by the reduction 
rule. By induction, we have a paraproof net N to substitute for {A, Bi, B2}. We can add a 'S' node 
to N and get a new paraproof net which when substituted for {A, Bi'^B2} in 5" achieves the same 
effect as the substitution of in , keeping the same assignment of paraproof nets for all the other 
generalized axioms. The case of the (Ei rule is similar: we now have by induction two paraproof nets 
A^i and A''2 to substitute for {Ai, Bi} and {A2, B2}, and we form a new paraproof net by the 8) rule 
which when substituted for {Ai, A2,i?i ® B2} in S' achieves the same effect as the substitution of 
A^i and A^2 in S[. Hence the claim is proved. We get the statement by applying the claim to S and 
{A\'\...,Ai'^}[{A^,...,A^}]. a 

We can collect the results obtained so far. 
Theorem 1.12 The following are equivalent for a paraproof structure S : 

1. S is a paraproof net, i.e., is sequentializable, 

2. S satisfies the DR- criterion, 

3. S satisfies the strong Parsing criterion, 

4. S satisfies the weak Parsing criterion. 

Proof. We have proved (1) ^ (2) (3) and (4) ^ (1), and (3) (4) is obvious. □ 

These equivalences are easy to upgrade to "full MLL" , that is, to structures that also contain cuts. 
We briefly explain how the definitions are extended. A paraproof structure can now be formalized as 
, . . . , v4^"}[X], where X' is a (possibly empty) collection of disjoint subsets of {Ai, . . . , ^„}, of 
the form {B, B-^}. The conclusions of the paraproof structure are the formulas in {Ai, . . . , A„}\1J X'. 
The underlying graph is defined as above, with now in addition an edge between B and B^ for each 
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class of the partial partition X' . A paraproof is obtained as previously, with a new proof rule, the cut 
rule: 

hri,r2 

A sequentializable paraproof structure is now one which is obtained through the following formal 
system, which adapts and extends (last rule) the one in Definition 1 1.31 

[X']{Afs...,A^,i?^,C>^}[X] 
\]{aY\ . . .,Ai^^}[{{A,, . . . , A4}] [X']{A^\. . .,A^'^,{B>sCr}[X] 

. . .,A^'^,B^}[X] [Y']{Af,. . . C^}[F] 

[X' U , . . . , , Af A'"^/ , [B ® Cy}[X U Y] 

[X' UY'U {{B, , . . . , A^ , Af , . . . , A'^f ' , B^, {B^r}[X U Y] 

The parsing rewriting system is adapted and extended as follows: 

A/u = Bi^B2 

[X']{T,AU^i^^^^^}}[X,{/^,B^,B2}] [X']{r,A^uM}[x,{A,(Bi'Si32)}] 

A/u ^ Bi®B2 

[X']{T, AC'U{nl,n2}|[^^ {Ai, {A2, S2}] [X']{r, {Ai, A2, i?l ® S2}] 

[X', {B, S^}]{r, 5% {Ai, S}, {A2, B^}] ^P [X']{r}[X, {Ai, A2}] 

Of course, the formalization begins to become quite heavy. We encourage the reader to draw the 
corresponding graph transformations. Theorem 11.121 holds for paraproof structures with cuts. The 
cut rule is very similar to the ® rule, and indeed the case of a cut in the proofs is treated exactly like 
that of the rule. 

We have yet one more caracterization of (cut-free, this time) paraproof structures ahead, but let 
us pause and take profit from cuts: once they are in the picture, we want to explain how to compute 
with them, that is, how to eliminate them. There is a single cut elimination rule, which transforms a 
cut between Bi ® B2 and B^^B2 into two cuts between Bi and B^ , and between B2 and _B^, and 
eliminates the vertices Bi ® B2 and B^'^B2- Formally: 

[X', {B, ® B2, B^>^Bi}]{r, (Bi <g> ^2)^, {B^>^Bi)''}[X] 

^ [X', {Bi, B^}, {B2, Bim, B^\B!^\iB^)^\iBi)^-}[X] 
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where Ui = {u \ lu £ U} and f/2, Vi,V2 are defined similarly. Let us stress the diflFerence in nature 
between cut-elimination (— >) and parsing (— >p): the former is of a dynamic nature (we compute 
something), while the latter is of a static nature (we check the correctness of something). 

How are we sure that the resulting structure is a paraproof net, if we started from a paraproof 
net? This must be proved, and we do it next. 

Proposition 1.13 If S is a paraproof net and S — > S' , then S' is also a paraproof net. 

Proof. In this proof, we use the second part of Proposition ^21 Let us fix a switching for S', and a 
switching of the 'S' eliminated by the cut rule, say, L. This induces a correction graph on S, which can 
be represented with B^^B2 as root, with two sons Bi ® -B2 and B^ , where the former has in turn 
two sons Bi and B2- Let us call Ti,T2 and T{ the trees rooted at -61,-82 and B^, respectively. The 
correction graph for S' is obtained by placing Ti as a new immediate subtree of r{ and T2 as a new 
immediate subtree of the tree rooted at B2 ■ We use here the fact that we know that B2 occurs in T{ 
(the important point is to make sure that it does not occur in T2 , as adding a cut between B2 and B2 
would result both in a cycle and in disconnectedness). This shows that S' satisfies the DR-criterion, 
and hence is a paraproof net. □ 

We now describe yet another characterization of paraproof nets, elaborating on a suggestion of 
Girard in This last criterion is interactive in nature, and as such is an anticipation on the style of 
things that will be studied in the subsequent sections. The following definition is taken from |^ 1^ 
(where it is used to generalize the notion of multiplicative connective). 

Definition 1.14 Let E be a finite set. Any two partitions X and Y of E induce a (bipartite) graph 
defined as follows: the vertices are the classes of X and of Y , the edges are the elements of E and 
for each e € E, e connects the class of e in X with the class of e in Y . We say that X and Y are 
orthogonal if the induced graph is connected and acyclic. 

Let iS" be a paraproof structure with conclusions A'^'^ , • ■ • , A^" , and consider a multiset of paraproof 
nets A^i = {(A]'-)'^i}[Xi], . . .,Nn = {(^j^)^"}[X„], which we caU collectively a counter-proof for S. 
By taking Xi U . . . U X„, we get a partition of the (duals of the) leaves of S, which we call the 
partition induced by the counter-proof. We are now ready to formulate the Counterproof criterion, 
or CP-critcrion for short. 

Definition 1.15 (CP) Let S be a paraproof structure. We say that S satisfies the CP-criterion if its 
partition is orthogonal to all the partitions induced by all the counter-proofs of S . 

Proposition 1.16 // a paraproof structure S satisfies the DR criterion, then it also satisfies the 
CP-criterion. 

Proof. Let iVi, . . . , be a counter- proof of S. We can form a paraproof net by placing cuts between 
Ai and Ai , etc., which also satisfies the DR criterion. It is obvious to see that the cut-elimination 
ends exactly with the graph induced by the two partitions, and hence we conclude by Proposition 

[rm □ 

Proposition 1.17 If a paraproof structure satisfies the CP-criterion, then it satisfies the DR-criterion. 
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Proof. Let S = • ■ • , be a paraproof structure satisfying the CP-criterion and let us fix 

a switching for S. To this switching we associate a multiset 11 of extreme paraproofs of h Aj- A:^ , 
defined as follows: the (g) rules of the counter-proof have the form 

l-r,Bi \-B2 \-Bi \-T,B2 
or 

\-T,Bi(g)B2 h r, Bi (g) B2 

according to whether the corresponding of S* has its switch set to L or to R, respectively. By 
performing a postorder traversal of the counter-proof, we determine a of paraproof 

structures and a sequence IIi, . . . jllp of multisets of extreme paraproofs, such that the roots of 11^ 
determine a partition of the conclusions of Si, for all i. We start with Si = S and IIi = 11. We 
construct Ili+i by removing the last rule used on one of the trees of 11^, and by removing from 
Si the formula (and its incident edges) dual to the formula decomposed by this rule (this is cut 
elimination!). We stop at stage p when Hp consists of the generalized axioms of IT only, and when Sp 
consists of the partition of S only. Let Gi be the graph obtained by taking the union of Si restricted 
according to the (induced) switching and of the set of the roots of 11^, and by adding edges between 
a conclusion A of Si and a root h F of 11^ if and only if A-^ occurs in T. We show by induction on 
p — i that Gi is acyclic and connected. Then applying this to i = p — 1 we obtain the statement, 
since Gi is the correction graph associated to our switching to which one has added (harmless) edges 
from the conclusions of S to new vertices h Ai , respectively. The base case follows by 

our assumption that S satisfies the CP-criterion: indeed, the graph Gp is obtained from the graph G 
induced by X and the partition induced by 11 by inserting a new node in the middle of each of its 
edges, and such a transformation yields a tree from a tree. 
Suppose that one goes from Gi to Gj+i by removing 

\-r,Bi,B2 

hr,Bi's>B2 

Then, setting Ni = \- T,Bx,B2 and N[ =\- T,Bi'^B2, Gi is obtained from Gj+i by renaming A^i 
as N[, by removing the two edges between B^ and A''i and between and A''i, by adding a new 
vertex B^ ® B2 and three new edges linking B^ B2 with B^, i?^, and N[. Considering G^+i as a 
tree with root A^i, we obtain Gj by cutting the subtrees rooted at B^ and B2 and by removing the 
corresponding edges out of A^i, by adding a new son to A''i and by regrafting the subtrees as the two 
sons of this new vertex. This clearly results in a new tree. 

Suppose now that one goes from Gj to Gi+i by removing, say 

h r, Bi (g) B2 

Then, setting A''i = h F, Bi and N[ =\- T, Bi ^ B2, Gi is obtained from G^+i by renaming A^i as N{, 
by removing the vertex h B2 and the two edges between Bf- and Ni and between B2 and h B2, and 
by adding a new vertex Bi^B2 and two new edges linking Bi^B2 with B^ and N[. Considering 
Gj+i as a tree with root h S2, we obtain Gi by cutting the root h B2 (which had a unique son) and 
by inserting a new node "in the middle" of the edge between B^ and A''i, which makes a new tree. □ 

Hence, we have proved the following theorem. 
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Theorem 1.18 The following are equivalent for a paraproof structure S : 

1. S satisfies the CP- criterion, 

2. S satisfies the DR- criterion. 

But there is more to say about this characterization. Let us make the simphfying assumption that 
we work with paraproof structures with a single conclusion A (note that any paraproof structure can 
be brought to this form by inserting enough final 'S' nodes) . Let us say that a paraproof structure of 
conclusion A is orthogonal to a paraproof structure of conclusion A^ if their partitions are orthogonal. 
Given a set H of paraproof structures of conclusion B, we write for the set of paraproof structures 
of conclusion B-^ which are orthogonal to all the elements of H. We have (where "of" is shorthand 
for "of conclusion" ) : 

{paraproof nets of A-'-}^ ~ {paraproof nets of A} 

= {extreme paraproof nets of A*^}^ . 

Indeed, Proposition 1 1 . 1 61 and the proof of Proposition 11.1 71 sav that: 

{paraproof nets of A} C {paraproof nets of A-^}^ and 
{extreme paraproof nets of A-*-}-"^ C {paraproof nets of A} , 

respectively, and the two equalities follow since 

{paraproof nets of A^}^ C {extreme paraproof nets of A^}^ . 

We also have: 

{paraproof nets of A} — {paraproof nets of A}-^-'- 

= {extreme paraproof nets of A}^^ . 

Indeed, using the above equalities, we have: 

{paraproof nets of A}^-'- = {extreme paraproof nets of A}^-'- 

= {paraproof nets of A-'-}^ 

= {paraproof nets of A-'-^} 

= {paraproof nets of A} , 

from which the conclusion follows. Anticipating on a terminology introduced in section [S] we thus 
have that the set of paraproof nets of A forms a behaviour, which is generated by the set of extreme 
paraproof nets. The paraproof nets of conclusion A are those paraproof structures that "stand the 
test" against all the counter-proofs A-^, which can be thought of opponents. We refer to Exercise 1 1.2 II 
for another criterion of a game-theoretic flavour. 

Putting the two theorems together, we have obtained three equivalent characterizations of sequen- 
tializable paraproof structures: the DR-criterion, the Parsing criterion, and the CP-criterion. What 
about the characterization of sequentializable proof structures? All these equivalences cut down to 
proof structures, thanks to the following easy proposition. 

Proposition 1.19 A sequentializable paraproof structure which is a proof structure is also a sequen- 
tializable proof structure. 
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Proof. Notice that any application of a generalized axiom in the construction of a paraproof net 
remains in the partition until the end of the construction. Hence the only possible axioms must be of 
the form {C,C-L}. □ 



We end the section by sketching how proof nets for MELL are defined, that is, how the proof nets 
can be extended to exponentials. Recall from section 3 that cut-elimination involves duplication of 
(sub)proofs. Therefore, one must be able to know exactly which parts of the proof net have to be 
copied. To this aim, Girard introduced boxes, which record some sequentialization information on the 
net. Boxes are introduced each time a promotion occurs. The promotion amounts to add a new node 
to the graph, corresponding to the formula \A introduced by the rule. But at the same time, the part 
of the proof net that represents the subproof of conclusion hTF, A is placed in a box. The formulas of 
?r are called the auxiliary ports of the box, while lA is called the principal port. We also add: 

• contraction nodes, labelled with a formula 7 A, which have exactly two incoming edges also 
labelled with 7 A, 

• dereliction nodes, also labelled with a formula 7 A, which have only one incoming edge labelled 
with A, 

• weakening nodes, labelled with 7 A, with no incoming edge. 
The corresponding cut-elimination rules are: 

• the dereliction rule, which removes a cut between a dereliction node labelled 7A^ and a principal 
port lA and removes the dereliction node and the box (and its principal port) and places a new 
cut between the sons A-^ of 7A^ and A of lA; 

• the contraction rule, which removes a cut between a contraction node labelled 7A^ and a 
principal port \A and removes the contraction node and duplicates the box and places two 
new cuts between the two copies of lA and the two sons of 7A'^ and adds contraction nodes 
connecting the corresponding auxiliary ports of the two copies; 

• the weakening rule, which removes a cut between a weakening node labelled 7A'^ and a principal 
port \A and removes the weakening node and erases the box except for its auxiliary ports which 
are turned into weakening nodes. 

All commutative conversions of sequent calculus (cf. part I, section 3) but one disappear in proof 
nets. The only one which remains is: 

• a rule which concerns the cut between an auxiliary port 7A-^ of a box and the principal port \A 
of a second box, and which lets the second box enter the first one, removing the auxiliary port 
7A^, which is now cut inside the box. 

These rules, and most notably the contraction rule, are global, as opposed to the elimination 
rules for MLL, which involve only the cut and the immediately neighbouring nodes and edges. By 
performing copying in local, elementary steps, one could hope to copy only what is necessary for the 
computation to proceed, and continue to share subcomputations that do not depend on the specific 
context of a copy. Such a framework has been proposed by Gonthier and his coauthors in two insigthful 
papers |^|2H| bridging Levy's optimality theory [SOI, Lamping's implementation of this theory |46| . 
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and proof nets. A book length account of this work can be found in [7|. It is related to an important 
research program, called the geometry of interaction (GOT) |30l I53L 1^ . A detailed survey would 
need another paper. Here we shall only sketch what GOI is about. The idea is to look at the paths 
(in the graph-theoretic sense) in a given proof net and to sort out those which are "meaningful " 
computationally. A cut edge is such a path, but more generally, a path between two formulas which 
will be linked by a cut later (that is, after some computation) is meaningful. Such paths may be 
termed virtual (a terminology introduced by Danos and Regnier |22| ') since they say something about 
the reduction of the proof net without actually reducing it. Several independent characterizations of 
meaningful paths have been given, and turn out to be all equivalent [HI E] : 

• Legal paths 8 , whose definition draws from a careful study of the form of Levy's labels, which 
provide descriptions of the history of reductions in the A-calculus and were instrumental in his 
theory of optimality. 

• Regular paths. One assigns weights (taken in some suitable algebras) to all the edges of the 
proof net, and the regular paths are those which have a non-null composed weight. 

• Persistent paths. These are the paths that are preserved by all computations, i.e. that no 
reduction sequence can break apart. Typically, in a proof net containing a (8)/'? cut 

A B 

A®B A^^B^ 



a path going down to A and then up through B gets disconnected when the cut has been 
replaced by the two cuts on A and -B, and hence is not persistent. 

Any further information on proof nets should be sought for in [2111221, and for additive proof nets 
(which are not yet fully understood) in, say, ,55, 42 . We just mention a beautiful complexity result 
of Guerrini: it can be decided in (quasi-)linear time whether an MLL proof structure is a proof net 

m- 

Exercise 1.20 (MIX rule) We define the Acylicity criterion hy removing the connectedness require- 
ment in the DR-criterion. Show that this criterion characterizes the paraproof structures that can be 
sequentialized with the help of the following additional rule: 

{<,...,A^",<V..,<f'}[xur] 

that corresponds to adding the following rule to the sequent calculus of MLL, known as the MIX rule: 

h r h A 
h r, A 

(Hint: adapt correspondingly the Parsing criteria.) 
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Exercise 1.21 (AJ-criterion) In this exercise, we provide a criterion for cut-free proofs which is 
equivalent to the Acyclicity criterion (cf. Exercise \1.20\) and thus characterizes MLL+MIX cut-free 
proof nets, due to Abramsky and Jagadeesan Let S — {A^^ , ■ ■ • , ll"'^] proof structure, 
and let 

M = {m^ I m = (u, i), i £ {1, . . . , n}, u S Ui} U {m~ | to = (u, i), i G {1, . . . , n}, u G Ui] . 

(M is a set of moves, one of each polarity for each conclusion of an axiom - think of these for- 
mulas as the atoms out of which the conclusions of the proof structure are built). Let U = {{v,i) \ 
V is a prefix of some u G Ui\. Given {v,i) G U and a sequence s G M* , we define s as follows: 

f^i., i (s f^''^*') if i ^ j and V is a prefix of u 

e\ -e {s[u,j) )\ - I otherwise 

where A G {+, — }. A finite sequence s — rn^m^ra^ . . . is called a play if it satisfies the following 
three conditions: 

1. for all {v,i) & U , s is alternating, 

2. for all {v, i) G U, if Ai/v — Bi ®B2, then only Opponent can switch {v, i)-components in s 

3. for all {v,i) G U, if Ai/v = By^B2, then only Player can switch {v,i)- components in s \'^^'''\ 

where component switching is defined as follows: Opponent (resp. Player) switches {v,i)- components 
if s contains two consecutive moves {u,i)^ {w,i)^ (resp. {u,i)~^(w,i)^ ) where u — vlu' and 

w = v2w' , or u = v2v' and w = vlw' . 

We need a last ingredient to formulate the criterion. To the partition X we associate a function 
(actually, a transposition) (j) which maps {u,i) to {w,j) whenever {Ai/u, Aj /w} G X. 

We say that S satisfies the AJ-criterion if whenever (j}{ini)^ nri^ <t>{m2)^ ■■■ m~ is a play, 
then mj~ 0(toi)+ 4>{m2)^ ■ ■ . m~ (/)(m„)+ is also a play. (It says that <j) considered as a strategy is 
winning, i.e. can always reply, still abiding to the "rules of the game".) 

Show that an MLL-hMIX sequentializable proof structure satisfies the AJ-criterion and that a proof 
structure satisfying the AJ-criterion satisfies the Acylicity criterion. (Hints: (1) Show using a mini- 
mality argument that if there exists a switching giving rise to a cycle, the cycle can be chosen such that 
no two tensors visited by the cycle are prefix one of another. (2) Fix a tensor on the cycle (there must 
be one, why?), walk on the cycle going up from there, and let {u,i),4>{u,i), . . . ,{w,j),(l){w,j) be the se- 
quence of axiom conclusions visited along the way. Consider s = {u,i)~ (f){u,i)^ . . . {w,j)^ (f>{w,j)^. 
Show that if the AJ-criterion is satisfied, then all the strict prefixes of s are plays.) Conclude that the 
AJ-criterion characterizes MLL-hMIX proof nets. 

Exercise 1.22 Reformulate the example of cut- elimination given in part I, section 3: 

h?A^'S'?B^,!(A&S) h!A®!B,?(A-L ©B^) 

H{AkB),l{A^ ®B^) 

using proof nets instead of sequents. Which reductions rule(s) should be added in order to reduce 
this proof to (an rj-expanded form of the) identity (cf. part I, Remark 3.1)? Same question for the 
elimination of the cut on \{AiiB). We refer to '^5/ for a complete study of type isomorphisms in 
(polarized) linear logic. 
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2 Towards ludics 



The rest of the paper is devoted to ludics, a new research program started by Girard in 36 . Ludics 
arises from forgetting the logical contents of formulas, just keeping their locative structure, i.e., their 
shape as a tree, or as a storage structure. For example, if (A'SB) © A becomes an address ^, then the 
(instances of) the subformulas A''8B (and its subformulas A and B) and A become ^1 (and ^11 and 
^12) and £,2, respectively. The relation between formulas and addresses is quite close to the relation 
between typed and untyped A-calculus, and this relation will be made clear in the following section 
(as a modest contribution of this paper). 

Thus, another aspect of resource consciousness comes in: not only the control on the use of 
resources, which is the main theme of linear logic, but also the control on their storage in a shared 
memory. An important consequence of this is that ludics gives a logical status to subtyping, a feature 
related to object-oriented programming languages. It has been long observed that the semantics of 
subtyping, record types, intersection types, is not categorical, i.e. cannot be modelled naturally in 
the framework of category theory, unlike the simply typed A-calculus, whose match with cartesian 
closed categories has been one of the cornerstones of denotational semantics over the last twenty 
years. Ludics points to the weak point of categories: everything there is up to isomorphism, up to 
renaming. The framework of ludics forces us to explicitly recognize that a product of two structures 
calls for the copying of their shape in two disjoint parts of the memory When this is not done, we 
simply get intersection types, so the product, or additive conjunction, appears as a special case of a 
more general connective, called the intersection. 

As a matter of fact, prior to the times of categorical semantics, denotational semantics took models 
of the untyped A-calculus as its object of study. The whole subject started with Scott's solution to the 
domain equation D = D ^ D, which allows us to give a meaning to self-application. The early days 
of semantics were concerned with questions such as the completeness of type assignment to untyped 
terms (as happens in programming languages like ML which have static type inference) |4l)[ll(Jj . Types 
were interpreted as suitable subsets of the untyped model, the underlying intuition being that of types 
as properties: a type amounts to the collection of all (untyped) terms to which it can be assigned. In 
this framework, subtyping is interpreted by inclusion, and intersection types by ... intersection ST,^12\. 
Ludics invites us to revisit these ideas with new glasses, embodying locations, and interactivity: in 
ludics, the intuition is that of types as behaviours, which adds an interactive dimension to the old 
paradigm. 

Another key ingredient of ludics is the daimon, which the author of this paper recognized as an 
error element. We mean here a recoverable error in the sense of Cardelli-Wegner |13| . Such an error 
is a rather radical form of output, that stops execution and gets propagated to the top level. If 
the language is endowed with error-handling facilities, then programs can call other programs called 
handlers upon receiving such error messages, whence the name "recoverable". The importance of 
errors in denotational semantics was first noted by Cartwright and Felleisen in (1991) (see m]). If A 
is an algorithm of two arguments such that A{err, ±) = err, this test, or interaction between A and 
{err, ±) tells us that A wants to know its first argument before anything else. This information reveals 
us a part of the computation strategy of A. Note that A{err, _L) = ± holds for an algorithm A that 
will examine its second argument first. It may then seem that err and _L play symmetric roles. This 
is not quite true, because -L means "undefined" , with the meaning of "waiting for some information" , 
that might never come. So err is definitely terminating, while we don't know for _L: ± is a sort of 
error whose meaning is overloaded with that of non-termination. 
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In ludics, Girard introduces (independently) the daimon, denoted by ^, with the following moti- 
vation. Ludics is an interactive account of logic. So the meaning of a (proof of a) formula A lies in its 
behavior against observers, which are the proofs of other formulas, among which the most essential 
one is its (linear) negation (not A, the negation of linear logic [291 132p. This is just like the 
contextual observational semantics of a program, where the meaning of a piece of program M is given 
by all the observations of the results of the evaluation of C[M], where C ranges over full (closed, 
basic type) program contexts. Now, there is a problem: if we have a proof of A, we hardly have a 
proof of A-^. There are not enough "proofs": let us admit more! This is the genesis of the daimon. 
Proofs are extended to paraproofs (cf. section P): in a paraproof, one can place daimons to signal 
that one gives up, i.e., that one assumes some formula instead of proving it. Hence there is always a 
paraproof of A^: the daimon itself, which stands for "assume A-^" without even attempting to start 
to write a proof of it. The interaction between any proof of A and this "proof" reduced to the daimon 
terminates immediately. There are now enough inhabitants to define interaction properly! 

We borrow the following comparison from Girard. In linear algebra, one expresses that two vectors 
X and y are orthogonal by writing that their scalar product {x \ y) is 0: we are happy that there is 
"enough space" to allow a vector space and its orthogonal to have a non-empty intersection. Like 0, 
the daimon inhabits all (interpretations of) formulas, and plays the role of an absorbing element (as 
we shall see, it is orthogonal to all its counter-paraproofs). It even inhabits - and is the only (defined) 
inhabitant of - the empty sequent, which in this comparison could be associated with the base field. 
But the comparison should not be taken too seriously. 

In summary, errors or daimons help us to terminate computations and to explore the behavior 
of programs or proofs interactively. Moreover, computation is ^\streamlike" , or demand-driven. The 
observer detains the prompt for further explorations. If he wants to know more, he has to further defer 
giving up, and hence to display more of his own behavior. This is related to lazy style in programming, 
where one can program, say, the infinite list of prime numbers in such a way that each new call of 
the program will disclose the next prime number. Coroutines come to mind here too, see |2()) for a 
discussion. 

A third ingredient of ludics is focalization, which we explain next. In section 2 of part I, we 
observed that the connective ® distributes over © and that both connectives are irreversible, and 
that on the other hand ^ distributes over & and that both connectives are reversible. We introduced 
there the terminology of positive connectives {®, ©) and negative connectives &). We extend the 
terminology to formulas as follows: a formula is positive (resp. negative) if its topmost connective is 
positive (resp. negative). 

Andreoli shed further light on this division through his work on focalization 5 . His motivation 
was to reduce the search space for proofs in linear logic. Given, say, a positive formula, one groups 
its positive connectives from the root, and then its negative connectives, etc.... Each grouping is 
considered as a single synthetic connective. Let us illustrate this with an example. Consider ((A^i (g) 
N2)&cQ)'^R, with Q,R, and P = Ni (S) N2 positive and Ni, N2 negative. The signs, or polarities of 
these formulas show evidence of the fact that maximal groupings of connectives of the same polarity 
have been made. We have two synthetic connectives, a negative and ternary one that associates 
{PhQ)^R with P, Q, i?, and a positive one which is just the connective ®. The rule for the negative 
synthetic connective is: 

hP,R,A hQ,i?,A 
h {PkQ)^R,K 
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Thus, a focused proof of ((A''i N2)^Q)'^R ends as follows: 



KiVi,i?,Ai 



h Ni^N2,R,A 



\- {{Ni!^N2)kQ)>^R,A 



Notice the alternation of the active formulas in the proof: negative {{P&zQ)'^R), then positive (iVi (g) 
A''2), etc... (We recall that at each step the active formula is the formula whose topmost connective 
has just been introduced.) The same proof can be alternatively presented as follows: 



The advantage of this formulation is that it displays only positive connectives. Notice also that there is 
at most one formula on the left of h. This property is an invariant of focalization, and is a consequence 
of the following observation. 

Remark 2.1 In a bottom-up reading of the rules of MALL, only the rule augments the number of 
formulas in the sequent. In the other three rules for &, (g), and ©, the active formula is replaced by 
a single subformula, and the context stays the same or gets shrinked. Thus, only a negative formula 
can give rise to more than one formula in the same sequent when it is active. 

Adapting this remark to synthetic connectives, we see that only a negative synthetic connective can 
give rise to more than one formula when it is active, and these formulas are positive by the maximal 
grouping. 

The focusing discipline is defined as follows: 

1. Once the proof-search starts the decomposition of a formula, it keeps decomposing its subfor- 
mulas until a connective of the opposite polarity is met, that is, the proof uses the rules for 
synthetic connectives; 

2. A negative formula if any is given priority for decomposition. 

The focusing discipline preserves the invariant that a (monolatcral) sequent contains at most one 
negative formula. Indeed, if the active formula is positive, then all the other formulas in the sequent 
are also positive (as if there existed a negative formula it would have to be the active one), and 
then all the premises in the rule have exactly one negative formula, each of which arises from the 
decomposition of the active formula (like A^i or N2 above). If the active formula is negative, then all 
the other formulas of the sequent are positive, and each premise of the rule is a sequent consisting 
of positive formulas only (cf. P,Q,R above). Initially, one wants to prove a sequent consisting of a 
single formula, and such a sequent satisfies the invariant. 

From now on, we consider sequents consisting of positive formulas only and with at most one 
formula on the left of h. We only have positive synthetic connectives, but we now have a left rule and 
a set of right rules for each of them: the right rules are irreversible, while the left rule is reversible. 



h R. Ai A^f h- A2 



h Ni^N2,R,A 



hQ,R,A 



((TVi (g) N2)^ ®Q^)(S)R^\-A 
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Note that the left rule is just a reformulation of the right rule of the corresponding negative synthetic 
connective. Here are the rules for the ternary connective {P-^ © Q-^) ^ R^: 



\-P,R,A \-Q,R,A {-P'-R} 
{{P,R},{Q,R}} 

(P^©Q^)(8)i?^ h A 

{Q,R} 

Here is how the top right rule has been synthesized: 

Phr 

hP^©0-L,r RhA 

The synthesis of the other rules is similar. Note that the isomorphic connective (P^®Q^)©(P^(Xii?^), 
considered as a ternary connective, gives rise to the same rules. For example the top right rule is now 
synthesized as follows: 

Phr Ph A 

h p^(g,R^,r 
h((p^®g^)©(p^®p^),r,A 

More generally, it is easily seen that any positive synthetic connective, viewed as a linear term 
over the connectives (E) and ffi, can be written as a © of Cg), modulo distributivity and associativity: 

P(7Vi, . . . , iVfc) = • • • © (A^^(„,i) ^ • • • ® N^imj^)) © • • • 

where m ranges over {1, . . . n} for some n, the range of is {1, . . . , fc}, for each m the map (^(m, _) = 
Xj.(j){m,j) is injective, and the map \m.(j){m, _) is injective (for example, for (A^i ® N-^) ^N^, we have 
n = 2, ji = j2 = 2, (t){l, 1) = 1, (^(1, 2) = 3, (/>(2, 1) = 2, and (f){2, 2) = 3). Note that the connective 
is equivalently described by a (finite) set of finite subsets of {1, . . . ,k}. The rules for P(- • •) are as 
follows (one rule for each m € {1, . . . n}): 

hP{N,,...,Nk),Au...Aj^ 

There is one rule (scheme) corresponding to each component of the © that selects this component and 
splits its (E). Dually, a negative synthetic connective can be written as a & of 'S: 

N{Pi, . . . , Pfe) = • • • & (P^(™,l)'S' • • -"SP^imJrn)) & • • • 

Here is the rule for N{- ■ ■). 



Phr Ph A 
h (P^©o^)®P^,r,A 

g h r Ph A 
h (p^©Q^)0P^,r,A 
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I" P<P{1,1), ■ ■ • 1 p<l>{l,jl)l 



N{Pi,...,Pk)^h A 

There is one premise corresponding to each component of the &, and in each premise the 'S''s have 
been dissolved into a sequence of positive formulas. 

Remark 2.2 Note that in the negative rule we have no choice for the active formula: it is the unique 
formula on the left. Thus, the negative rule is not only reversible at the level of the formula N{- ■ ■), 
but also at the level of the sequent N{- ■ ■)-^ \- A. In contrast, in a positive rule, one has to choose not 
only the m and the disjoint Ai, . . . , , as noted above, but also the formula P{- ■ ■) in the sequent 
KP(...),A. 

Below, we display some examples of non- focusing proofs: 



hP&Q,iVi,Ai ^R,N2,A2 
hP&g,i?,iVi®iV2,Ai,A2 
h {PkQ)'^R,Ni®N2,Ai,A2 



^ {PkQ)^R,Ni,Ai hiV2,A2 

h (P&Q)'S>-R,A^i ® Af2,Ai,A2 

In the first proof, we did not respect the maximal grouping of negative connectives, and we abandoned 
our focus on (P&Q)'S'P to begin to work on another formula of the sequent. In the second proof, we 
did not respect the priority for the negative formula of the sequent. These examples show that the 
change of granularity induced by focusing is not innocuous, because the focusing discipline forbids 
some proofs. Of course, this was the whole point for Andreoli and Pareschi, who wanted to reduce the 
search space for proofs. But is the focusing discipline complete in terms of provability? The answer is 
yes [5], i.e., no provable sequents are lost. The result actually holds for the whole of linear logic, with 
! (resp. ?) acting on a negative (resp. positive) formula to yield a positive (resp. negative) formula 
(see Remark 

Before we state and sketch the proof of the focalization theorem, we introduce a focusing sequent 
calculus which accepts only the focusing proofs. First, we note that a better setting for polarized 

formulas consists in insisting that a positive connective should connect positive formulas and a negative 
connective should connect negative formulas. This is possible if we make changes of polarities explicit 
with the help of change-of-polarity operators (cf., e.g., |12]). For example, ((A^i ® N2)SzQ)'^R should 
be written as (j ((jiVi)) (^U ^2))&(T Q))'StT ^)- For MALL, we get the following syntax for positive 
and negative formulas (assuming by convention that the atoms X are all positive, which is no loss of 
generality since we get "as many" negative atoms X^). 
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P :■= X\P<^P\P(!)P\l\0\iN 
N :■= X-L II N>^N I N&zN \±\T ||tP 

The operators J. and tare called the shift operations. There are two kinds of scqucnts: h F; and h F; P 
where in the latter the only negative formulas allowed in A are atoms. The zone in the sequent on 
the right of ";" is called the stoup, a terminology which goes back to an earlier paper of Girard on 
classical logic jcil) . The stoup is thus either empty or contains exactly one formula. The rules of this 
sequent calculus are as follows (we omit the units): 

h F;P 

Focalization 



SHIFT 

hr,P; hA,iV; 



POSITIVE 

hF;Pi hF;P2 hFi;Pi hFziPa 



hF;Pi®P2 hF;Pi©P2 h Fi, Fa; Pi (g) P2 



NEGATIVE 

h7Vi,iV2,F; KiVi,F; hiV2,F; 

hNi>^N2,r- h NiSzN2,T; 

In the focalization rule we require that the negative formulas of F (if any) are atomic. It should be 
clear that focusing proofs are in exact correspondence with the proofs of linear logic that respect 
the focusing discipline. In one direction, one inserts the shift operations at the places where polarity 
changes, like we have shown on a sample formula, and in the other direction one just forgets these 
operations. The synthetic connective view further abstracts from the order in which the negative 
subformulas of a negative connective are decomposed. 

Remark 2.3 In view of the above sequent calculus, a weaker focusing discipline appears more natural, 
namely that obtained by removing the constraint that in a sequent with a non-empty stoup the context 
consists of positive formulas and negative atoms only. What then remains of the focusing discipline is 
to maintain the focus on the decomposition of positive formulas, which is enforced under the control 
of the stoup. 

Theorem 2.4 (Focalization) The focusing discipline is complete, i.e., if 'r A is provable in linear 
logic, then it is provable by a cut-free proof respecting the focusing discipline. 

Proof (indication). The theorem says among other things that nothing is lost by giving priority 
to the negative connectives. In the two examples of non-focusing proofs, the decomposition of the (g) 
can be easily permuted with the decomposition of the &, or of the 'S'. Conversely, the decomposition 
of 'S> has given more possibilities of proofs for the decomposition of ®, allowing to send P&Q on the 
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left and R on the right. But, more importantly, the theorem also says that nothing is lost by focusing 
on a positive formula and its topmost positive subformulas. More precisely, not any positive formula 
of the sequent to prove will do, but at least one of them can be focused on, as the following example 
shows: 



h N2®N3,N^,Ni- 
hN2(S)Ns, >^Ni- h iV4 , Ni- 
h N2 (E) N3, N4 (g) (Ni->^N^),Ni- 
h iVi ® {N2 ® N3),N4 ® {N^>SNi-),Ni- 

This proof is not focused: the decomposition of the first positive formula iVi (iV2 (Xi N3) of the 
conclusion sequent is blocked, because it needs to access negative subformulas of the second positive 
formula. But focusing on the second formula works: 



h N2^N3,Ni-,Ni- 
h Ni® {N2(E)N3),N^,Ni- 
h TVi © {N2 (E) N3),N^'^Ni- h Ni, Ni- 

h TVi © {N2 <E) N3),N4 8 {N^'SNi^), 

A simple proof of the focalization theorem can be obtained by putting these observations together 
(Saurin [S^). More precisely, the following properties of sequents of linear logic are easily proved: 

(1) Any provable sequent h F, iV has a proof in which N is active at the last step: this is an easy 
consequence of the fact that a configuration "negative rule followed by positive rule" can be 
permuted to a configuration "positive rule followed by negative rule" (and not conversely). 

(2) Any provable sequent h F consisting of positive formulas only is such that there exists at least one 
formula P of F and a proof of h F which starts (from the root) with a complete decomposition 
of (the synthetic connective underlying) P. Let us sketch the proof. If the last step of the proof 
is a © introduction, say, T = A, Ai (B A2 and h F follows from h A,Ai, induction applied to the 
latter sequent yields either Ai, in which case Ai © A2 will do, or a formula P of A, in which case 
we take that formula, and we modify the proof of h A, Ai obtained by induction, as follows: we 
spot the place where Ai appears when the decomposition of P is completed, and insert the © 
introduction there, replacing systematically Ai by Ai © A2 from the insertion point down to the 
root, yielding a proof of h A, Ai © A2 that satisfies the statement. The tensor case is similar. 
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Then a focalized proof can be obtained out of any MALL proof by repeatedly applying (1) to a 
cut-free proof so as to turn the sequent into a sequent of positive formulas only, and then (2), etc... 
The size of the sequents decreases at each step, so the procedure creates no infinite branch. The 
same property is likely to work in presence of exponentials, using the same kind of ordinal as in a 
cut-elimination proof. 

Steps (1) and (2) may seem ad hoc manipulations, but in fact, they can be taken care of by 
cut-elimination. For example, setting R' — P&zQ, wc can reshape the proof 



hR''^R,Ni,Ai hiV2,A2 

^ R'>9R,Ni®N2,Ai,A2 
so as to get a proof ending with the decomposition of the negative connective 'S', as follows: 

• K R''^ , R' K R'^ , R 

^R'>9R,Ni,Ai h (i?''S>i?)^,i?,i?' : 

h iVi,Ai hiV2,A2 

hi?',i?,iVi®7V2,Ai,A2 
hi?''S'i?,7Vi(g)iV2,Ai,A2 

This kind of transformation can be performed systematically, so as to yield a proof which can be 
formalized in the focused sequent calculus with cuts. The resulting proof can then be run through the 
cut-elimination in the focused caclulus, yielding a focused and cut-free proof. This approach is closer 
to Andreoli's original proof (see ^\ for details). □ 

Remark 2.5 As a hint of how the focalization theorem extends to exponentials, let us mention that 
Girard has proposed to decompose \N and 7P as [ ]),N and "f bP , where ]), is a negative connective, 
taking a negative formula N to a negative formula ]),N and where b is dually a positive connective. The 
change- of -polarity aspect of ! and ? is taken care of by the already introduced just-change-of-polarity 
operators | and "f. The rules for these connectives in the focusing system are as follows: 

l-?r,7V; hr;P hT; hr,bP,bP; 

\-7TJN; hr;bP h T, bP; ^ T, bP; 

Exercise 2.6 Show that the focusing proof system (in its weaker form) enjoys the cut- elimination 
property. 

Exercise 2.7 Show that jj is reversible, and discuss the irreversibility o/b. 
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3 Designs 



We now arrive at the basic objects of ludics: the designs, which are "untyped paraproofs" (cf. section 
^ . Designs are (incomplete) proofs from which the logical content has been almost erased. Formulas 
are replaced by their (absolute) addresses, which are sequences of relative addresses recorded as 
numbers. Thus addresses are words of natural numbers. We let CjC; ' ' ' G ^* range over addresses. 
We use J to denote \ j € J}, and we sometimes write for ^i. The empty address is written 
e. Girard uses the terminology locus and bias for absolute address and relative address, respectively. 
Let us apply this forgetful transformation to our example {P-^ ® Q^) of the previous section, 
assigning relative addresses 1,2,3 to P^,Q^, R^, respectively. 

(IhT ^3 h A 

(-,e,{{l,3},{2,3}}) ^ hC,r,A 

^hA 

f 2 h r ^3 h A 
(+,^,{2,3}) ! ! 

^e,r,A 

Notice the sets {1,3} and {2,3} appearing in the names of the rules. They can be thought of as a 
reservation of some (relative) addresses, to be used to store immediate subformulas of the current 
formula. Girard calls these sets ramifications. 

We then consider a notion of "abstract sequent": a negative (resp. positive) base (also called 
pitchfork by Girard) has the form ^ h A (resp. h A), where A is a finite set of addresses, i.e., a base is 
a sequent of addresses. We always assume a well-formedness conditions on bases: that all addresses 
in a base are pairwise disjoint (i.e. are not prefix one of the other). We spell out this condition in the 
key definitions. 

The designs are trees built via the following rules {lo denotes the set of natural numbers, and Vf{uj) 
denotes the set of finite subsets of uj): 

Daimon: (h A well formed) 

^ 

h A 

Positive rule {I C uj finite, one premise for each i <E I, all A^'s pairwise disjoint and included in A, 
h ^, A well formed): 

• • • h A, • • • 

(+,C,/) ^ 



he,A 

Negative rule (A/" C P/(w) possibly infinite, one premise for each J G Af, all Aj's included in A, 
^ h A well formed): 

• • • h ^ 7^ J, Aj • • • 

^hA 
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The first rule is the type- free version of the generahzed axioms of Definition 11.21 while the two other 
rules are the type- free versions of the rules for the synthetic connectives given in section |2 The root 
of the tree is called the base of the design. A design is called negative or positive according to whether 
its base is positive or negative. 



Here is how a generic negative design ends. 



( + ,6,/2) 



6*2 \- As 



(-,6*l,A/'2) 



I- 6n*'/2, A4 



6*1 ^ A3 



Note that the definition allows infinite designs, because the negative rule allows for infinite branch- 
ing. But we also allow vertical infinity, i.e., infinite depth, and in particular we allow for recursive 
definitions of designs, as in the following fundamental example. The fax Fax^^^i based on ^ h ^ is the 
infinite design which is recursively specified as follows: 



As its name suggests, the fax is a design for copying, which is the locative variant of identity, as it 
maps data to the "same" data, but copied elsewhere. It is indeed folklore from the work on game 
semantics (see e.g. 0) - and actually from the earlier work of ^Jj - that computations are just 
mosaics of small bricks consisting of such copycat programs. Partial (finite or infinite) versions of the 
fax are obtained by deciding to place some M's instead of having systematically 'P/(w) everywhere. 
How to define infinite designs of this kind and solve such recursive equations precisely is the matter 
of exercise 13.161 Other simple examples of designs are given in definition 13.41 

Remark 3.1 Note that the three rules embody implicit potential weakening. Recall that weakening 
consists in deriving F, T' h A, A' from F h A (for arbitrary F' and A' ). Indeed, in the Daimon rule, 
A is arbitrary, and in the two other rules we only require that A contains the union of the A^ 's (resp. 
the Aj's) (see also E.emark \S.ll\) . 

Remark 3.2 It is immediate that the addresses appearing in a design based on h A (resp. on ( \- A) 
are extensions of addresses ^ of A (resp. {^} U A). Also, it is easy to see that the property of 
well-formedness is forced upon designs whose base has the form h 1^ or 1^ h, as well as the following 
one (the parity of an address refers to whether its length is even or odd): 

• All addresses in each base on the right of h have the same parity, and then the formula on the 
left if any has the opposite parity. 
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Girard requires this propertiy explicitly in the definition of a base. It does not appear to play an 
essential role, though. 

Two flavors of designs. Girard also gives an alternative definition of designs, as strategies. Let us 
briefly recall the dialogue game interpretation of proofs (of. part I, section 2). In this interpretation, 
proofs are considered as strategies for a Player playing against an Opponent. The Player plays 
inference rules, and the opponent chooses one of the premises in order to challenge the Player to 
disclose the last inference rule used to establish this premise, etc... . In a positive rule. Player chooses 
a £, and an /. (Going back to the setting of section [21 he chooses which formula (^) to decompose, 
and which synthetic rule (/) to apply.) But in a negative rule (— ,^,A/'), Player does not choose the ^ 
(cf. Remark 12. 2|l . Moreover, we can equivalently formulate the information conveyed by Af by adding 
a premise ft ( "undefined" ) for each / ^ Af: intuitively, the non-presence of J in A/" is not a choice of 
Player, but rather a deficiency of her strategy: she has not enough information to answer an "attack" 
of Opponent that would interrogate this branch of the tree reduced to il. These remarks suggest a 
formulation where the negative rule disappears, or rather is merged with the positive rule: 

|-^z*J,Aj,j 

he, A 

where A^j^ and A^^ are disjoint as soon as ii ^ 12. And we need to introduce fl: 

n 

h A 

This axiom is used for each J' £ 'Pf{Lo) \Af. Note that this change of point of view leads us to add a 
new tree that did not exist in the previous definition, namely the tree reduced to the axiom. Girard 
calls it the partial design. 

Remark 3.3 Note that in the above formulation of the rule, there are infinitely many premises, that 
are split into a finite number of infinite sets of premises, one for each i € I . The syntax that we shall 
introduce below respects this layering. 

Under this presentation of designs, an Opponent's move consists in picking an i (or ^i), and a J. 
We thus use names {—X,J) to denote Opponent's moves after a rule (+,e, /), with ( = ^i for some 
i G I. Here is how the generic example above gets reformulated: 

^ ( + ,6,/2) 

^ ( + ,C2,/l) 

^^i*Ji,A'2 ■■■ hei*Ji,A2 

Finally, we can get rid of the "abstract sequents" , and we obtain a tree (resp. a forest) out of a 
positive (resp. negative) design, whose nodes are labelled by alternating moves (+, ^, I) and (— , J), 
which are called positive and negative actions, respectively: 
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n 



( + ,6,/2) 



n 



By abuse of language (especially for fl), fl and ^ can also be called positive actions. We say that 
(+. ^, /) (resp. (— , C, J)) is focalized in ^ (resp. C,). The opposite (or dual) of an action (+, ^, /) (resp. 
I)) is the action (-,^,7) (resp. (+,^1)). 

Girard describes the tree or forest of actions as its set of branches, or chronicles, which are al- 
ternating sequences of actions (see Remark 13 .SI) . A chronicle ending with a negative (resp. positive) 
action is called negative (resp. positive). Here, we choose a slightly different approach, and we present 
a syntax for designs. More precisely, we first present pseudo-designs, or raw designs, and we use a 
typing system (or, rather, a sorting system) to single out the designs as the well-typed pseudo-designs. 

Here is the syntax: 



We shall use the notation ipi^j for 0j. We remark: 

• the role of / that commands the cardinality of the finite set of the ip^i^s; 

• the uniform indexation by the set of all finite parts of lo of the set of trees of a pseudo-design 



• the role of the index C in V'c, that commands the shape of its initial negative actions. 

The syntax makes it clear that a positive design is a tree the root of which (if different from and 
•J<) is labelled by a positive action (-1-,^,/) and has branches indexed by i £ / and J £ Vf{Lu). The 
corresponding subtrees are grouped in a layered way (cf. Remark l3.3|l : for each i, the subtrees intexed 
by i, J, for J varying over Vf{Lo) form a negative design if^^i, each of whose trees has a root labelled 
with the corresponding negative action (— , ^i, J). Note that each negative root (— , ^z, J) has a unique 
son: designs are strategies, i.e.. Player's answers to Opponent's moves are unique. 

The following definition collects a few useful designs expressed in our syntax. 
Definition 3.4 We set: 



Positive pseudo-designs 
Negative pseudo-designs 



(/.::=0||^||(+,e,/)-W?. Ue/} 
V'c::={(-,C,J)0j| JG^/(^)} 



Dai = ^ 



Dai^ ={{-,tJ)^ \JePf{u;)} 
Skunk^ = {{~,^,J)n I J e Pfiuj)} 

Skunk+ = (+, /) • {{(-, 6, J)n\J€ Vfiu;)} \ i G 1} 
Ram^^j) - (+, /) • {{(-, ^i, J)^ I J e Vfiuj)) I I E 1} 
Diru = {(-, e, m\lEM}yj {(-, e, m\I^ N} 
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The skunk is an animal that stinks and has therefore degree zero of sociabiUty, where sociabihty is 
measured by the capacity for compromise, expressed by ^ in Indies (see Exercise 14 .61) . 

Not every term of this syntax corresponds to a design, whence our terminology of pseudo-design. 
We can recover those pseudo-designs that come from designs as the "correctly typed" ones. More 
precisely, designs can be defined either as typing proofs of pseudo-designs (our first definition earlier 
in the section), or as typable pseudo-designs. Girard uses the French words "dessin" and "dessein" 
to name these two flavours, respectively. This is reminiscent of the distinction between typing "a la 
Church" and typing "a la Curry" , respectively. Here is the "type system" : 

(h A well formed) (h A well formed) 

f7 : (h A) >h:{hA ) 

Vi Aj C A 

Vii,i2 ih ^i2^ K n A,, = 0) 
\ h ^, A well formed / 



• • • : ^ A,) ■ • • 



Wc. Men : (^e,A) 

J e Vf{uj) 

(/.J : (hC*J,Aj) ••• ( VJ AjC A 

C h A well formed 

{(~,C,J)0j| Je7'/(^)}:(ChA) 

We also write :{..., {d h Ai), . . .} if 5* = , • ■ • , V'Cn } V'Ci • id ^ Ai) for all i (finite number 
of bases). 

Definition 3.5 A design is a typable pseudo-design ^ fi. The pseudo-design fl, which is obviously 
typable (Q : (h A), for any A), also denoted by Fid, is called the partial design. 



Conversely, the following algorithm takes as input a finite positive pseudo-design (f> and returns a 
base h A such that (p : {\- A) if it is a design and otherwise returns FAIL. Actually, the inductive load 
requires taking as arguments (j) together with a (well-formed) base h T. Initially, we take T empty. 
The algorithm is described by a formal system using the following notation: 

</) : (h r, ?) : (h A) 

which reads as follows: the algorithm, when given and F as inputs, finds A such that h A (cf. 
Remark IX^ . F C A, and : (h A). The failure case is written as : (h F, ?) — > FAIL. The 
induction is on 0. If the design is infinite, we apply the algorithm to finite approximations - we can 
obviously not decide whether an infinite pseudo-design is a design. 



Q : (h F, ?) — >n:{hr) ^ : (h F, ?) — > ^ : (h F) 
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In the following rules, the notatfon j stands for 4>j where 'i' = I * G ^} and ip^i ~ {(— , J)(/)j | 
J€Vf[io)}. 



iel,J e Vf{uj) 



r \ {C} Ujg7,jep^.(c^) well formed 



(+, /) ■ * : r, ?) (+, /) • * : (h r \ {a Ue/.jeP,(-) 
*£»,J : * J, ?) F^/L 



^, /) • * : r, ?) — > FAIL 



(+,e,/)-*:(hr,?) >F^/L 

• • ■ "^ii.J : e« * J, ?) — > : * Kj) ■■■ r \ {e} U^e/.jeP^i.^) A«„/ not well formed) 

• * : (h r,?) — > FAIL 

The first rule of failure, which has a unique premise (for a given i G I and a given J), expresses failure 
propagation. The second rule says that failure occurs when linearity (actually, affinity) is violated. 
The third rule controls the well-formedness of bases. The following statement is easy to prove. 

Proposition 3.6 The above algorithm, with (/),r as arguments, terminates if and only if there exists 
A' such that (j) : (h A') and T C A'. The base h A returned by the algorithm is the smallest base that 
satisfies these conditions. 

Proof (indication). That the algorithm returns the minimum base follows from the fact that it 
collects unions of bases, which are themselves least upper bounds. □ 

Remark 3.7 The relation between the two flavours of designs (dessins and desseins, or typing proofs 
and typable pseudo-designs) is of the same nature as the relation between proofs in natural deduction 
expressed in terms of sequents and proofs in natural deduction expressed as trees of formulas with 
marked hypotheses, or as the relation between linear logic proofs in the sequent calculus formulation 
(cf. part I, section 2) and proof nets (cf. section^. While proof nets allow us to identify many 
sequent calculus proofs, here, as we have just seen, the two points of view (explicit sequents or not) 
happen to be essentially the same, up to weakening. This is due to the focalization, which already 
eliminated many sequent calculus proofs! 
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Remark 3.8 We can define an injection * mapping pseudo-designs to sets of chronicles ending with 
a positive action as follows: 



X,J)r\rerj} 



UjGP/(i^){(' 

Note that the fl 's disappear during this transformation. In lS6j, the designs-desseins are defined as 
sets of chronicles, and properties characterizing the image of the set of designs by the function * are 
given. These properties include: 

• coherence ; the maximal prefix of any two chronicles of the design which are not prefix of each 
other ends with a positive action; 

• focalization; a negative action which is not at the root must be of the form {—,£,i, J) and its father 
must be of the form (+, ^, /), with i G /; 

• subaddress; a positive action (+, ^, /) is either such that ^ is an address on the positive side of the 
base, or there exist i, and J such that ^ = ^'i, i € J , and (— , J) occurs on the chronicle between 
(+, I) and the root. 

Designs have an imphcit pointer structure: for each action whose focus is some ^i, one looks for 
the action of focus ^ befow it in the forest or tree representation of the design, if any, and we say 
that the former points to the latter, or is bound to the latter. Otherwise, we say that the action of 
focus £,i occurs free in the design. It is easily seen that for well-typed designs the two actions must 
have opposite signs, and that a free action is necessarily positive and that its focus belongs to the 
right hand side of the base of the design (cf. Remark I3.2|l . Moreover, negative actions are always 
bound and always point to the immediately preceding positive action. These are typical features of 
Hyland and Ong (HO) games 021 (see for precise comparisons). In |16[I17| . a general formalism 
of such (untyped) HO style strategies over a given alphabet of moves, called abstract Bohm trees, has 
been developped. Opponent's moves are letters of the alphabet, while Player's moves are pairs noted 
[a, <-^], where a is a letter of the alphabet and where k is cither the symbol _ that indicates that the 
move is free, or a natural number that counts the number of Opponent's moves encountered before 
reaching the binder. The designs are abstract Bohm trees constructed on the alphabet consisting of 
all the pairs («,/) of a natural number and a finite set of natural numbers. The general shape is as 
follows (rotating the tree clockwise by 90 degrees): 



(*l,J2)[(j3,/2),3]{ 
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The difference with the (raw) designs is that we use relative addrcssses rather than absolute ones. 
The pointers allow us to reconstruct the full addresses. Here is how the fax looks like, first, as a 
design-dessein: 



and then as abstract Bohm tree (where end with respectively): 



{i,Ji)[{i',Ji 



ih,J2)[{ji, J2), M I (j2, J3)[(i2, J3), ^] { ; 



The pointer 1 in, say, [{ji, J2), formalizes the fact that the positive action (+, ^ji, J2) is not bound 
to the negative action that immediately precedes it, but, one level up, to {—,£,, Ji): Girard calls this 
subfocalization. 

Designs and A-calculus. If we restrict both designs and (a variant of) A-calculus, then we can get 

a bijective correspondence, as we show now. The interest is twofold. First, this correspondence allows 
us to connect designs to the well-established tradition of the A-calculus. But also, it has suggested us 
to extend the correspondence to all designs, giving rise to a term language for designs. We start with 
the restricted correspondence, which applies to slices, defined next. 

Definition 3.9 (Slice) A slice is a design in which each application of the rule (— ,^,A/') is such that 
Af is a singleton. In terms of designs as sets of chronicles, this rule says that if the design contains 
two chronicles r(— 7i) and r(— ,^,12), then I\ = l2- 

(It is easy to check that slices arise from purely multiplicative proofs.) We introduce variables and 
proof terms for slices simultaneously, as follows: 
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n:{hA) ^ : (h A) 

P:i^{xr-CJ\J^J}A') (A'CA) 



X{xj I J e J}.P : (C h A) 



■■■Mr- (e* ^ A,) • • • 



/ iel 

Vi Aj C A 

Vji,i2 («i ^ ^2 ^ n A, 
y X fresh 




In the first (resp. second) rule, the cardinal of J (resp. /) gives the number of head A's (resp. the 
number of arguments of the variable). The bases ^ h A and h A are now such that A consists of a 
set of variable declarations of the form x : (. Let us place the A-calculus style syntax that we just 
introduced (on the left below) in perspective with the syntax of normal forms of the A-calculus (on 
the right below): 



The difference lies in the fact that we have freed ourselves from the sequential order of application of 
the ordinary A-calculus, and that we now have explicit addresses for the arguments of the application: 
i is the (relative) address of Mi . 

Remark 3.10 Combining the bijection from slices to terms just given with the representation of 

designs as HO style trees with pointers given above, what we have obtained is a correspondence of 

the same nature as the bijection between X-terms and X-terms in De Bruijn notation (see e.g. J7y). 

More precisely, it is exactly a bijection of this kind, replacing De Bruijn indices by other indices that 

we have called Bohm indices in '_/?/ (and that have appeared in previous works of Danos-Regnier and 

j 

Huet), which are pairs of indices of the form [i, <-^] where j counts the number of A 's separating the 
variable from its binder and where i serves to identify which among the variables collectively bound by 

the binder it is. For example, the Bohm indices of xi and X2 in X{xi, X2}.xi{X{yi}.X2{}} are [1,^] 

and [2,<— =], respectively. 

Remark 3.11 It is easily checked that the typable terms are exactly the affine terms, i.e., those in 
which any variable occurs at most once. 

We next move on and give terms for arbitrary designs. 



M ::= X{xj \ j e J}.P 

P ::= x{M, \ iel}\n\>h 



M ::= Axi . . . Xm.P 
P -.-.^ xMi . . . Mn 



r2 : (h A) 



^ : (h A) 
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M, : [ii h A,) 



Mi Ai c A 

Vii,i2 (ii ^ 12 ^ Ail n Ai, = 0) 
y 1' fresh J 



(x.I) • {Af, I I e /} : (h a: : A) 



...P.:(h{.,:0-h-EJ},A,)... (^IT'/ca) 
{J = X{x, I J e J}.Pj I J e : (C h A) 



Forgetting now about typing rules, we have the foUowing (untyped) syntax: 

M {J = X{xj \ j € Jj.Pj \ J G Pf{Lu)} 
P (x ■ I){M, I z e /} I r! II ^ 

Since we now have two syntaxes for (pseudo-)designs, we shall refer to the two syntaxes as the abstract 
syntax and the concrete syntax, respectively (in the order in which they have appeared in the paper). 
As an illustration, here is the fax (recursively) expressed in concrete syntax: 

Paa;c,x:5' = {I ^\{y,\ieI}.{x-I){Fax^,,^y^.,(^i\iClI}\I (^rf{uj)} . 

In this form, the fax appears as the variable x, in all its possible (hereditarily) 77-expansions. Note 
the remarkable use of the additive flavour of designs: the fax is ready for any ramification /, i.e. for 
any possible 77-expansion (see Exercise 14. lUf) . 

Ordering designs. Two rather natural partial orders can be defined on designs: 

• The usual partial information ordering on trees: to increase information, one replaces an U, with a 
tree ^ f2 (in the first representation of designs, this amounts to extend a set A/" in a negative rule). 
This is reminiscent of the ordering between stable functions defined by the inclusion of their traces 
(see e.g. 0] chapter 12]). 

• The second ordering C is obtained by adding a second rule for increasing: replace a subtree by a 
>h. We shall see that this ordering characterizes the observational order between designs, so we shall 
call it the observational ordering. It is reminiscent of the pointwise ordering between Scott continuous 
functions. This ordering is defined formally as follows: 



17 C 



(*e/) 



J e Vf{u;) 



■ h e /} □ (+,^,/) • {V^, \i&l} {. . . , (-,C, J)h, . . .} c {. . . , (-,C, JWj, ■ ■ ■} 
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01 Q4>2 02 !^ 03 



!^ 01 !^ 03 

We write 0i <^ 02 (resp. 0i <^ 02) if 0i !^ 02 has been proved without using the axiom C »^ 
(resp. O C 0). Thus, 0i <^ 02 is the stable ordering, which we also denote as 0i C 02 (see Exercise 
ITT5ll . 

Remark 3.12 We have the following decomposition property: i/ 0i !^ 02, then there exists a cf) such 
that 01 <^ <''^ 02, obtained by first cutting some subtrees and replacing them by a and then 
by adding some subtrees at some Q 's. Note that this is a quite natural way of proceeding, since one 
might do useless work otherwise, by adding subtrees using axiom \Z (f> that could then be removed 
while using axiom C fi. The decomposition is not unique, as we have both f2 <^ fl <^ and 
f2 <^ *^ <^ ^ (see Exercise \3.n}) . Remarkably enough, similar decompositions have been discovered 
and exploited elsewhere: 

• by Winskel in his analysis oj Berry's stable ordering and bi-domains (see 05^ ]. and 

• by Laird in his extensional account of the model of sequential algorithms \45\ \iy^ . 

Exercise 3.13 Complete the characterization of designs as sets of chronicles (cf. B.emark \S.f^) . (Hint: 
The only missing conditions are the ones ensuring that the designs are affine.) 

Exercise 3.14 Is there a sense in which the concrete syntax and the abstract syntax of pseudo-designs 
or of designs are in bijective correspondence? (Hints: Pseudo-designs in abstract syntax are more 
permissive, e.g., they do not exclude the possibility of a move J) "pointing" to a move (+,^,/). 

On the other hand, "raw" terms in the concrete syntax are actually all "typable", in a system where 
the affinity constraint is relaxed.) 

Exercise 3.15 Show that, on designs as sets of chronicles (cf. Remark VS. t^) . the stable ordering is set 
inclusion, and that the extensional ordering can be characterized by the following property: 0i C (/)2 
if and only if whenever ri = r (— ,^,/)r^ G 0i and r2 = r (—,^1-^)^2 ^ 02 diverge afier some action 
{—,£,, I), then either r'l — Q or r2 — 

Exercise 3.16 We define formally (infinite- depth) designs as ideals (i.e., downwards closed directed 
subsets of designs) with respect to C. Show that the equation defining the fax admits a least fixed point 
which is such an ideal. 

Exercise 3.17 Let < be the intersection of the partial orders <^ and <^ . Show the following more 
precise formulation of the decomposition property: if 0i C 02 , then there exist 4>„dn o-nd (pmax such 
that: 

V0 ((01 <^ 4> <^ 02) 0mm < < 4>max) ■ 

4 Normalization of designs 

Normalization is a general machinery that applies to all abstract Bohm trees, hence to designs in 
particular. It can be described in various equivalent ways, see [II)) . In the affine case, the execution 
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is simpler (no copying involved), so we shall describe here (in three disguises) an abstract machine 
for designs taking the affine nature of designs into account. The first two presentations of the nor- 
malization engine are based on the abstract and concrete syntax for designs, respectively, and use the 
framework of environment machines, whose states have two components: the code to be run, and the 
environment or context or counter-design. The third version is more visual, and features a simple 
token game. Its main advantage is that it makes the very useful notion of the part of a design visited 
during normalization explicit. 

We embark on the first description, for which we shall need the following terminology. 

Notation 4.1 We denote by ^! a finite set {"^Ci: ■ • ■ iV'C,,} '^f negative pseudo-designs, with the Ci 's 
pairwise disjoint. We say that accepts (resp. does not accept) an address C i/C e {Ci, . . . , Cn} (resp. 
C ^ {Cij • ■ • I Cn} )■ If ^ accepts i.e., ( = Q for some j , we use the notation ^'^ for . We also 
note simply for {V-'}- Finally, if 5* accepts ^, we note \ = '5 \ {"(Ac}- 

We start with a design : (h Ai) to be normalized against a design -0 : (^ h A2) (with Ai and 
A2 pairwise disjoint), which we call its counter- design. The normalization should produce a design 
based on h Ai , A2 (think of a cut rule) . 

The machine has states of the form ((/) | ^P), and execution consists in applying the following state 
transformation, which we call the weak reduction rule (by contrast to strong reduction, introduced 
below): 

(R) ((+,e,/)-r |*)^(*cj|ru(vI/\0) (VP accepts ^) 

Notice that we throw away all of except for 5'^,/. In particular, the negative actions (— , J) of "if 
are not needed. That we can do this safely will be justified by Proposition 14 . 1 81 

The initial state is {(j) \ {ip}). It is important to keep \ ^ in order to handle subfocalizations, as 
illustrated by the example below (where C = S,iii, for some i G /i): 



(+,^«2,/2) 



( + ,C,^) 



(-,$«!, /l) ••• (-,C?2,/2) 



(+,e,/) 



or: 



<^ =(+£/). VP' ^ = {...,(-,?, /)</>!,...} 

>k',T,' J f c- r\A I c- T\ \ withal = (+,Cii,/i)-*i 

Wlth^- ={...,(-, eil,/l)02, •••,(-, Ci2,/2)- ■•,•••} with*-/ ( r nrh \ 

With <^2 = (+, c, J) • ^2 J ^ i • v-^"; ^' ■ ■ 

With 03 = ( + ,^Z2,/2) • • ■ 

Execution goes as follows: 
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(01V) (01 1 VI/' u (VA 0) = (01 1 

(02 |^'lU(^''\Cil)) 

(03i^'2u(*i\ou(*'\eii)) 

At state (03 I 'i>2 U (vpi \ 5) U (vp' \ fii)}, it is essential to have 'i>' available, as the head action of 03 
corresponds to a head action of vf' and not of ^^2, i.e., when normalization reaches (+,^42,^2), the 
corresponding negative action on the left is not fomid above (+,C; J)j but above (+,1^,/). 

The machine stops when it reaches an fl (which one should interpret as waiting for more information 
from the context), a ^ (that indicates convergence), or a state {{+, £,n, I71) ■ '^n I ^n) such that "ifn 
does not accept f„ (in A-calculus terminology, this means reaching a head variable). In all three cases, 
we have found the root of the normal form of (0 | ijj) (see also Remark 14.411 . 

We can go on, and perform "strong reduction" , by relaunching the machine in order to get pro- 
gressively, on demand, the chronicles of the normal form, and not only the first positive action of the 
normal form. This can be formalized by indexing the state by the chronicle q of the normal form 
under exploration. The index remains invariant in the rule (R), which is thus reformulated as: 

(R) accepts 

Initially, the index is the empty chronicle e. The chronicle is extended using the following rule (S 
stands for strong reduction): 

(S) ((+, /)•*'! — > I does not accept ^ and i £ /) 

Note that this rule is non-deterministic: the choice of i, J is left to the Opponent of the normal form, 
he has to say which branch of the normal form he intends to explore. 

The two other termination cases remain termination cases in this setting, and are formalized as 
follows: 

Read Iqft (resp. !q^) as an output, saying that the chronicle qft (resp. g>J<) belongs to the normal 
form. As for rule (S), we can read that q{+, ^, /) belongs to the normal form, but in addition we know 
that the normal form contains a chronicle of the form q{+^ ^, ^i, J)Ki^j for all i £ / and J, and 
may start an exploration in order to find any of these actions Kij. 

We denote the normal form of (0 | by |0, {V"}!! or simply |0, "0], and more generally, we 

denote the normal form of (0 | ^i) (see Definition I4.2|l by |0, 4*]. As a set of chronicles, it is obtained 
by collecting all the results of execution: 

[0, *] = {g(+, C, /) I 3 (0 I ((+, /).*'! vfr") J 

U{qn I (01*), ^*lqn} 
U{q^ \ (01*), ^Mg^} 

U {qfl \ computation does not terminate and q is the maximal index reached} 

Note that we have added a second case of divergence: the divergence due to the cases where the 
machine does not terminate. To be more precise, we are speaking of non-termination due to rule 
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(R) only (at index q), not of non-termination due to a potentially infinite branch of the normal form 
(recall that we are in a demand-driven setting). 

Therefore, there are two sorts of O in the normal form: those that are "created" (by the magic 
of a mathematical formula, not by some computation observed in a finite time), and those that come 
from the fi's explicitly present in or The overloading of the two situations is really what makes 
the difference between ft and ^ that otherwise behave in a dual way (cf. e.g. the definition of <^ 
and <■'*). It is also the reason for the name Fid given by Girard to the partial design il: you must 
have faith (Fides in Latin) to wait for a result that might never come. 

We still have to establish that fcj), is a design, not only a pseudo-design, and hence we should 
exhibit a typing proof of Icf), ^P]. We first have to type the states of the machine, which we can also 
call nets, using Girard's terminology inspired from proof nets. We have seen that a state, or net, 
consists of a positive design tj) and a collection of negative designs. We stick to this situation in 
the following definition. 

Definition 4.2 A (positive) net is given by a positive design <j) : (1^ A), called the principal design of 
the net, and a finite set '5 of negative designs such that: 

1. the addresses appearing in the bases of (p and of the elements of"^ are pairwise disjoint or equal; 

2. an address may appear at most twice in these bases; 

3. if an address appears twice, then it appears once on the left of h and once on the right of \~, 
thus forming a cut; 

4-. The graph whose set of vertices is {0} U 4" for the associated set of bases) and whose edges are 
the cuts is acyclic. 

We denote the net by (0 | ^P). 

Girard requires moreover connectivity. We do not make this requirement explicit here, but it is 
clear that what interests us is the connected component of <f). In this connected component, all the 
^'s on the left of h are cut. This is easily shown by induction on the length of a path starting at h A. 
The only interesting case is when the path has reached a node of the form ^' h A' and proceeds from 
there to a node of the form £f' h A" with a cut on Sf . But then by induction and by condition 2, the 
latter node must have been visited by the path earlier and must be the one that witnesses that f ' is 
cut. Therefore, we know by induction that ^" is cut. 

Hence all the non-cut addresses of the designs of the connected component stand to the right of 
h, in (j) or in one of the elements of . Let A be the set of these addresses. We set (0 | ^) : (h A). (It 
is thus the connected component that we actually type, but it is more convenient not to throw away 
explicitly the elements of the other connected components.) 

Proposition 4.3 // {(f) \ *) is a net and if (</) | *) : (h A), then {(p, : (h A). 

Proof. We only prove that rule (R) preserves typing, which is enough to prove the statement in the 
case of a net of type \- (see Remark Suppose that ((-|-,^,/) • 4'' | : (h A). We have to prove 
(M/^,, |^'U(^'\0) : A). 

Condition 4. We have (+,^,/)-^'' : (h ^, .. .), and «-:(..., (^ h ...),.. .), hence*' : {(^i h . . .) | i £ /} 
and : (h ^*/, . . .). Thus we remove the bases (h ^, . . .) and (^ h . . .) from the graph and replace 



35 



them by the base (h ^★/, . . .) and the bases (^z h . . .). The edge that connected (h f , . . .) to h . . .) 
is replaced by edges that connect (h f ★ /, . . .) to each of the (fi h . . .)'s. Note that these new edges 
form a connnected configuration. The edges that once arrived to h . . .) now arrive to {\- . .), 

and those that arrived to (h ^, . . .) are now either disconnected or arrive to one of the (^i h . . .)'s. If 
there was a cycle in the new graph, one would then easily construct one in the former graph (to which 
we can go back by amalgamating the bases (^i h . . .)). 

Conditions 2 and 3. The two occurrences of ^ disappear, and are replaced by pairs of occurrences of 
each □ 

Remark 4.4 A consequence of the previous proposition is that when the weak reduction machine 
starting from (0 | 4') : (h A) stops in a state {{+, £,n, In) ■ '^'n I ^n), where does not accept then 

G A. Indeed, by type preservation we have ((+, /„) • | : (1^ A). On the other hand we have 
{+,£.71, In) • : Aq) and : {Ci h Ai, . . . , Cm I" A„} with ^„ G Aq and ^„ ^ {Ci, . . . ,Cm}, that is, 

is not cut. Hence £„ £ A. In particular, when A is empty, then the weak reduction machine can 
only end with an or a and there is no need for strong reduction - this situation is quite similar 
to the situation in a functional programming language like CAML, whose implementation is based on 
weak reduction, which is complete for evaluating observable results of basic types. In the sequel, we 
shall often place ourselves in such a situation, with (j) : {\- ^) , ^ = {V'}; '"^'^ "0 • 1^); /o*" some £. 

Definition 4.5 For : (h ^) and ip : {£ \~), we write (pJ^ip (or ip-L(f>) if |0, V'] = ^ o'^'^ we say 
that (j) is orthogonal to ^p. For a set A of designs on the same base h ^ (resp. £, ^), we write 
A^ = {"0 I V0 G yl (/"-L^A} (resp. A-^ = {</> | V'(/' G ^ '^-L^'lj; o,i^d we write simply 0^ for {0}^. 

The definition of orthogonality is not limited to bases of the form h ^ and ^ h: more generally, 
if : (h ^1, . . . ,Cn), i'l ■■ (6 ^),- ■ ■ , : (fn ^) , and {(j), {ipi, . . .,tpn}j = ^, then we say that (p is 
orthogonal to {ipi, . . . ,ipn}. 

Exercise 4.6 Show that >J< is the only design which is orthogonal to the skunk (cf. Definition \3.^^ . 

Exercise 4.7 Show that if I Q J , (p : /) and ipj : {j h) for all j G J, then |0, {ipi \ i G /}] = 
|0, {ipj I j G J}] (taking (p to be of type \- J on the right side of this equality). 

Exercise 4.8 Rule (R) does not make explicit the alternation between (the subdesigns of) cp and ip: 
the positive actions that guide computation are indeed alternating. The following variant of rule (R) 
(to be applied systematically after the second step) makes this alternation explicit: 

{(+,tI)-^'\^)^{{+,£i,Ii)-K\'^i) (*i accepts 
(R') 

(1) Using this rule, check that the execution of the above example unrolls now as follows: 

(010) — . (0x1*') 

(02|*l) 

(03 I (^'V^^OU^-s) 

(2) Show formally that the machine obtained with (R') is equivalent to the one defined with (R). 
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Exercise 4.9 What about normalizing a negative design against a negative design? (Hint: Use strong 
reduction.) 

Normalization in concrete syntax. How does normalization look like, when described in terms 
of the concrete rather than the abstract syntax? We let the reader convince himself that the afline 
(weak reduction) machine given above gets mapped through the bijective correspondence between the 
concrete syntax and the abstract syntax to the following one: 

{{x • I){M, h e /} I p U (x ^ {...,/ = A{x, I I e Ij.Pi, ...})^{Pi\pU (IJ (x, ^ M,)) 

iei 

In this rule, p stands for an environment which is a function from a finite set of variables to terms, 
described as a set of bindings of the form (x ^ M), and the union symbols stand for disjoint unions. 
The initial state corresponding to {4> \ "0) is here of the form {P\{{x ^ M)}), for some P : {\- x : ^, Ai) 
and M : h A2). 

The crucial use of the affine restriction lies in the fact that x does not occur in any of the M^'s, 
and hence that the binding for x is consumed after the application of the rule. But the general case 
of non necessarily affine pseudo-designs in concrete syntax is not much more difficult to describe, by 
means of a very similar abstract machine, which is an instance of the (stack-free) Krivine machine 
described in [T^ : 

{{x ■ I){M, \ iel}\p) ^ {Pi\pi\J (|J(x, ^ (M, I p))) 

tei 

where p{x) = {...,/= (A{a;, | i G I}. Pi | p/), . . .}. 

The main change with respect to the affine machine is that now an environment maps variables to 
closures, which are used in the implementation of functional programming languages to keep track of 
a code together with the environment for its free variables. Note that we keep now all the environment 
to be available for the Mi's, even the binding for x, as x may appear in any of the Mi's. 

Exercise 4.10 Show that, for any positive P of appropriate type, the (strong version of) the machine 
reduces {P \ {x' <— Fax^^x-.^'}) to P[x' <— x] (a-renaming). 

Token machine: normalization as a visit. We now give our third version of normalization, which 
is more intuitive. It is described in terms of pushing a token through the designs (see also [21]) • Under 
this interpretation, the net formed of 4> and ip remains fixed, and information (in the form of a mark 
or token placed on a single node) flows through it. Initially, the token is placed at the root of (p. In 
order to identify the nodes of cf) and ^, we introduce the following notation for occurrrences of actions: 

((+, ^, /) • {Vj, I I e I})e = (+, t I) ((+, C, I) ■ I * e I}hu = {^Pi^)u 

({(-,C,^)0j I JeP/(c^)}),/- (-,C,J) {{i-X,J)^j \JeVfiu;)})jiu^iMu 
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Thus an occurrence is a word over an alphabet whose letters are either z, /, or 1, and which appear 
in the order Ji/i 112/21*3 • ■ •■ The token is formalized as an occurrence u of either or which we 
write {L,u) (resp. {R,u)) if the occurrence is in (j) (resp. ^p). The token machine maintains a set of 
pairs ((L, u), {R, v)) where the actions (0)„ and {tp)v are opposite, and where each u, v occurs at most 
once. These pairs are called bindings (in a sequent calculus description of cut-elimination (cf. part I, 
section 3), they represent the successive cuts). Initially, the token is at occurrence {L,e), and the set 
of bindings is empty. The token game follows the tree structure and the pointer structure of (j) and ip, 
and the bindings. The rules are as follows: 

• from (i, e), with = (+, ^, /), move to {R, I) and place (((£, e), {R, I)) in the list of bindings; 

• from {R,u) such that {'>p)u is a negative action, move to (i?,itl); 

• from (i?, u) such that {ip)u = (+: C*; ^ points to v, and ((L, v'), {R, v)) is in the set of bindings, 
then move to {L, v' i I) and add ((L, v' i I), {R, u)) to the set of bindings; 

• from (L, u) such that ((/>)„ = (+, (^i, I), u points to v, and ((L, v), (i?, v')) is in the set of bindings, 
then move to (i?, v' i I) and add ((L, u), {R, v' i I)) to the set of bindings; 

• from {L,u) such that (0)„ is a negative action, move to {L,ul). 

For example, the execution of our running example goes as follows, with the corresponding actions 
(recall that ( — ^iii): 

{L,e) {R,I) (i?,/l) {L,iih) {L,iihl) {RJliJ) [RJliJl) (£,12/2) ... 
(</>)e (V')/ V'/i {4')iiii (0)»i/ii (V')/ij:J (V')/nJi {4')i2i2 

(+,e,/) (-,e,/) (+,eH,/i) (~,e«i,/i) (+,c,^) (-,c,^) (+,Ci2,/2) (-,e*2,/2) ... 

The actions visited during normalization are all the actions (</>)„ such that the token reaches 
position {L,u) and all the actions {i))u such that the token reaches position {R,u). They determine 
two designs (/>i C and V"! ^ V' (the pull-back, see Theorem I4.13|l which form a balanced pair (i.e., 
their sets of actions are dual). Remarkably, there is a converse to this (see ProDOsition l4. 19(1 . 

Exercise 4.11 Show that the first and third versions are equivalent, i.e., that they yield the same 
result of normalization for every pair of designs 4) ■ ^) and : (^ H). (Hint: At some point, 
Propo.sition \4.l3\ has to be used.) 

Analytical theorems. These are the following theorems: 

1. the associativity theorem, that corresponds to Church- Rosser property; 

2. the separation theorem, that corresponds to (an affine version of) Bohm's theorem; 

3. the monotonicity theorem, that corresponds to the syntactic continuity theorem in the A-calculus, 
due to Welch and Levy, which states that Bohm trees commute with contexts (see e.g. ^ section 
2.3]); 



38 



4. the stability theorem, that corresponds to the syntactic stabiHty theorem of the A-calculus, due 
to Berry, which states that the Bohm tree function from partial terms to partial Bohm trees is 
stable (it enjoys actually the stronger property of being sequential, see e.g. section 2.3]). 

Remark 4.12 The tradition behind the third and the fourth theorems is more widely known through 
their outsprings in denotational semantics Scott 's continuous semantics, Berry 's stable seman- 
tics. Berry's semantics was clearly motivated by the stability theorem, while the syntactic continuity 
theorem seems rather to have given an additional a posteriori confirmation of the pertinence of Scott's 
theory, which was initially suggested by results in recursion theory ( theorems of Rice and of Myhill- 
Shepherdson). 

We start with the stability theorem. 

Theorem 4.13 (Stability) If r is a chronicle of 10,-0], then there exist 0o ^ 0, "00 ^ minimum, 
called the pull-back of r along normalization, such that r G |0o,'0ol- 

Proof. We mark all the nodes visited during the (deterministic) normalization in order to obtain r: 
all these nodes must be present, otherwise normalization would diverge, moreover they suffice (just 
adding fi's above non visited negative actions following visited positive actions, in order to obtain 
pseudo-designs). One also has to check that these pseudo-designs are actually designs (omitted). □ 

It is well-known that stability described in terms of pull-backs as above entails stability in algebraic 
terms: if 0i,02 ^ and '4'i,'4'2 C ip, then 

[01 n 02 , V^i n 0^21 = [01 , ^il n |02 , ^2} 

(set intersection of the designs as sets of chronicles). In particular, for 0i, 02 ^ based on, say, h ^, 
and ip based on ^ h, we have: 

(01 n 02)J-'0 <^ 0i-L'0 and 02-10 • 
The same properties are true for any bounded intersection of 4>k's, V'fc's. 

Theorem 4.14 (Separation) The following equivalence holds, for all designs 0i,02 on the same 
base: 0i □ 02 if and only if (f>j^ C 0^ . 

Proof. Let 0i C 02. By transitivity, we may restrict our attention to <^ and to <^. Let be such 
that 01 -L^). Let be the part of 0i that is effectively visited during normalization (cf. the stability 
theorem). If 0i <^ 02, is also included in 02, and we thus also have <j)2-Ltp- If 0i 02, and if is 
not included in 02, then some subtree of has been replaced by but then the normalization will 
meet this i.e., normalization is more rapid with 02 than with 0i. 

Reciprocally, suppose that 0j^ C 0^, and that there exists a pair of chronicles, one in 0i, the other 
in 02, that are not prefix of each other. Their intersection q ends with a negative action, since after 
a positive action, the set of negative actions depends only on the previous positive action, not on the 
design. By Exercise 13. 151 it suffices to check that the only possible configurations are the following: 
either the branch that continues in 0i is reduced to fi, or the branch that continues in 02 is reduced 
to ^. We use the following construction, that allows us to explore a chronicle interactively. We first 
define the (dual) view of a chronicle (supposing that the design is based on h e, for simplicity): 
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view{r{—, C, J)) = vieAt!{r){+, (,, J) 
view{{+,e,I)) = (-,e,/) 

viewir{-,^,J)---{+i],I)) = view{r){+,^,J){-,^j,I)) 
We next define the following designs (as sets of chronicles): 

• Opp^ (for a positive chronicle r) consists of the set of the views of the prefixes of r, plus view{r) ^; 
we have that Opp,, is the minimum design such that rJ^Opp^, by construction; 

• Oppq (for a negative chronicle) consists of the set of the views of the prefixes of q, plus all the 
chronicles of the form view{q){—,(,J)^''> we have that Opp^ is the minimum design such that 
{q>i<)-LOpPg, by construction. 

Back to the proof. Let q be the maximum common prefix. We distinguish three cases: 

1. q*h G (pi- Then we have {q>h)J-Oppg, hence (pi^Opp^. We should then have </)2-L0ppg, but the 
interaction between (f)2 and Opp^ follows q, and then has not "enough fuel" to continue in (f)2. 
This case is thus impossible. 

2. r — q{+, I) E 4>i- We reason similarly. We have r_LOpp,., and the interaction has not "enough 
fuel" to continue in (j)2, except if € 02 (second allowed configuration). 

3. qfl € This is the first allowed configuration. □ 

Remark 4.15 We have made a crucial use of the affinity condition in the proof of the separation 
theorem. Consider a chronicle of the form 9(+,0(~'^^i) • • • (+)0(~>C*2)- • •; forgetting ramifications 
for simplicity. Then we collect two views 

view{q) {-,^) and view{q) (-,0 (+,^^2) 

that do not fit together in a design, since a strategy answers an Opponent's move uniquely. 

Theorem 4.16 (Associativity) Let and \E'2 be such that (j) and "ifi U \E'2 form a net. Then 

we have: 

P,*ll,*2l = [<^,*lU*2l. 

Proof (indication). Let r be a chonicle of {(j), U ^'2], with puUback 0', ^P'^, ^'3. One shows that 
r can be pulled back along normalization of (|(/), 5*1] | 5*2), with a puUback (f>\ such that = '^2 
and the puUback of 4>' along normalization of [(J), ^Pi] is (^', \E'']^. A similar statement can be proved in 
the other direction. These statements are best proved using a strong reduction version of the token 
machine. Intuitively, the machine execution corresponding to the left hand side does some extra work 
with respect to the execution on the right hand side net: as the execution proceeds, it records the 
part of the normal form of the net | ^fi) that is being built. □ 

Theorem 4.17 (Monotonicity) // (pi C (j)2 and E ip2,i, ■ ■ ■ , V'l," E i'2,n, then 

l(l)l,{tpl,l,...,tl)l,n}} E I(/'2,{V'2,l,---,V'2,n}] • 
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Proof. We have to show that |</)i, . . . ,i/'i,n}]-L* impHcs |02, {'>p2,i, ■ ■ ■ , V'2,n}]-L*, for all By 

associativity, this amounts to deduce |02, {ipi,i, ■ ■ ■ , V'l,™}'-''!'] — ^ from {V'2,1, • ■ • , '02,n}U4'] = ^, 
which is a consequence of the assumptions (recall that any increase in the order □ only fastens 
normalization) . □ 

We end the section by showing that normalization explores only multiplicative parts. 

Proposition 4.18 The pull-back of a chronicle is always a slice (cf. Definition \S.9\) . More generally, 
the pullhack of a slice is a slice. Moreover, each node of this slice is visited only once. 

Proof. We limit ourselves to a normalization between </) : (h ^) and i/j : h) (and hence to the 
puUback of For two negative actions (— , ^j, Ji) and (— , £,i, I2) with the same focus and above the 
same positive action (+,^, J) to be visited, we need on the other side two positive actions (+,^«,/i) 
and (+, S^i, I2) pointing to the same negative action (— , ^, /). We reason by minimal counter-example, 
where minimality is taken with respect to the time at which the hypothetical second visit takes place. 
Typing excludes that these two positive actions be one above another (the address is consumed after 
the first visit). Thus they must appear in incompatible positions in the tree, and the divergence starts 
from a positive action. Then typing implies that the first two negative actions on the two diverging 
paths must have the same focus (disjointness of contexts). These two actions must have been visited 
before, a contradiction to minimality. Note that the reasoning applies a fortiori with /i = I2, which 
proves the last part of the statement. □ 

Notice that Proposition l4.18l implies that the token machine terminates on finite designs (a property 
which is obvious with our first formalization of normalization). 

Proposition 4.19 // two finite slices cj) and tp are such that their underlying set of actions are oppo- 
site, then the normalization of {4> \ ip) visits all of 4> and ip. 

Proof. (A more general statement is proved in 35, Proposition 1]). Note that since we deal with 
slices, we can omit the ramifications, and name the actions simply with their sign and their focus. We 
say that two slices satisfying the condition in the statement form a balanced pair. (+, ^) (resp. (— , ^)) 
occurs in if and only if (— ,^) (resp. (+,$)) occurs in ip. 

The proof is by contradiction. If the normalization stops before having explored and ip entirely, 
it stops having visited (/>' C and '0' ^ ^p, where cj)' and ip' form a balanced pair, and we have, say, 
(j)' ^ (j), but then also ip' ^ i/j since (p' and ip' have the same addresses. Consider the actions on the 
border, i.e., which are not in cp' nor in ip', but whose father is in (p' or ip': they must be negative, 
since otherwise the normalization procedure would have visited them. So let us pick an action (— ,^1) 
on the border, say in (p\ cp' . Then also (+,Ci) occurs somewhere in ip \ ip' . Consider the chronicle 
(determined by) (+,1^1), and let (— ,■^2) be the action of this chronicle which lies on the border. We 
can continue this and build an infinite sequence of actions (— ,Cn)- Now, for all n, we have ^„ = 
and (+,C^) € (p' U -0', for some and i„ (focalization condition, cf. Remark 13. 8|) . We also have 
that G 0' U ip' , since (p' and ip' form a balanced pair. The action (— ,^^J appears on the 

chronicle {-\-,£,n) (subaddress condition), and hence by construction (— ,$'J occurs before (-|-,^^_|_i) on 
this chronicle. It follows that {—,£,n) visited before (+,^,'i-|_i) during normalization. Since (+,'Cn) is 
visited right before (— , ^^), we have that (+, ^^j^^) is visited strictly after (+, ^^). But this contradicts 
the termination of the normalization procedure, which as we have seen is a consequence of Proposition 
WJ^ □ 
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Several characterizations of those designs <j) which can be entirely visited during normalization 
against a counter-design ip are given in '26'. 

Exercise 4.20 Show that in presence of the separation property, associativity is equivalent to (a 
general formulation of) the following statement (called closure principle^. If (f) '■ ^) and -0 : h A), 
then |0, ^pl is the unique design (j)' such that ■0'] = |0, {0, -0'}] for all ijj' : (Ah). 

5 Behaviours 

A positive behaviour on a base h A (resp. a negative behaviour on a base ^ h A) is a set G of designs 
of type (h A) (resp. (^ h A)) closed by taking the bi-orthogonal, i.e., G = G''"''^. In most cases, we 
suppose that the base is of the form h or ^ h. Equivalently, a behaviour, say, on the base h ^ (resp. 
(^ h)) is a set of the form , where A is an arbitrary set of designs of type (^ h) (resp. (h 
Throughout the section, we take £, — e. Here are some examples of behaviours: 

• If j4 = 0, then A-^ is the set of all the designs of type (e h) (resp. (h e)): this behaviour is 
denoted T. 

• If = T is negative (resp. positive), it is easy to see that A^ — {Dai} (resp. A^ = {Dai^}). 
Hence a behaviour is never empty, it always contains Dai or Dai~ . 

• If is a design, the smallest behaviour that contains it is: 

{0}^^ ^ {0' I C 0'} . 

Indeed, for any A, we have A-^ = {0' | A C 0'^}, so in particular {0}^^ = {0' | 0^ C 0'-'-} = 
{0' I C 0'}. 

Below, we list a few closure properties of behaviours, which are easily checked: 

• If G is a behaviour and if G G and !^ 0', then 0' G G (by the separation theorem). 

• If G is a behaviour and if 0^ is a bounded family of designs (considered as sets of chronicles) of 
G, i.e., 3 (Vfc 0fc C 0)), then their intersection is a design of G (by the stability theorem). 

• Every intersection of behaviours is a behaviour (as, say, A^ n = (AU B)^). 

Definition 5.1 (incarnation) If G is a behaviour and i/0 G G, we call the incarnation of (j) in G 
the smallest design C o/ G (whose existence follows from the second closure property listed above). 
We denote it as |0|g or simply |0|. An incarnated design is a design such that = |0|. We set 
|G| = {0gG|0 = |0|g}. 

The stability theorem and the definition of behaviour allow us to give a more operational char- 
acterization of the incarnation: |0|g is the set of chronicles that are visited during a normalization 
of against some design -0 of G^ (different designs may be used for witnessing the visit of different 
chronicles) . 

Incarnation is clearly contravariant: if G C H and G G, then |0|h C |0|g- The extreme case is 
|i/)|-p = Skunk (negative base). 
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Lemma 5.2 For any behaviour, we have G-^ = IGI"*". 

Proof. We get C |G|^ by contravariance. Now let ip e |G|-'- and let (f) e G. Then V'-L|(?!>|g, and 
hence ipJ-(t>G by monotonicity. □ 

Additives. We now have enough material to return to types and logic. The paradigm is that of 
behaviours as types. The rest of the section is devoted to constructions on behaviours, corresponding 
to those of linear logic, and more. Some of these constructions are reminiscent of phase semantics (cf. 
part I, section 5), but the present framework is obviously much richer. 

Definition 5.3 (Intersection, Union) // G^^ is a family of behaviours on the same base, the set 
intersection of this familly is a behaviour (cf. above), that ive call the intersection of these behaviours, 
notation Q^, G^. We define the union of behaviours |Jj, Gfe as the bi-orthogonal of their set union: 
U,G, = (UG,)^^. 

The ordinary additives correspond to the particular case where the connectives are applied to 
disjoint behaviours - a notion that we define now (using some of the designs of Definition 13.411 . 

Definition 5.4 (Directory) A directory is a set of ramifications (i.e., a subset ofVf{uj)). If G is 
a positive behaviour on h e, we define the directory Dir{G) as follows: Dir(G) = {I \ Ram(^^ ^ G G}. 
If G is negative, we define Dir[G) by the equation DirDj_r{G) — |-Cai"|G- 

The following properties show the relevance of this definition: 

• If G is positive, then Dir{G) is the set of the I's such that G contains a design beginning 
with (+,e, /). Let us check this, li 4> G G begins with (+,e, /), then (p □ Ram^^ j-), hence 
Ram(^^ J) G G, i.e., / G Dir[G). The reciprocal is immediate. 

• We have Z)ir(G^) = Dir{G). The proof goes as follows. Since G-'-'- = G, we may suppose 
that G is positive. We have / G Dir{G^) if and only if there exists G G such that the 
normalization of (0 | Dai~) explores the branch (— ,e,/) of Dai~ , i.e., such that cj) begins with 
(+, e, /). But by the previous property, this amounts to / G Dir{G). 

• If G is a negative behaviour and if ip is incarnated in G on base ^ h, then Dir{G) = {/ | 
(— , ^, /) is an initial action of i/'}. Indeed, each (f) of G^ induces a visit on ip, which starts with 
a (— ,^,/) matching 0's initial action: collecting all these visits together (which is the definition 
of incarnation), we get the statement. 

Definition 5.5 (Disjoint behaviours) We say that two behaviours G and G' on the same base are 
disjoint if Dir{G) and Dir[G') are disjoint sets. 

If two negative behaviours G and H are disjoint (that is, Dir{G) n DirilH) = 0), and if tpi and ■02 
are respective incarnated designs of G and H, their union is well-defined. Moreover, it is obviously 
a design of G fl H. This actually defines a bijection between |G| x |H| and |G n H|. Hence in the 
disjoint case, intersection is product! Girard calls this striking property the "mystery of incarnation". 

Lemma 5.6 // G and H are disjoint negative behaviours, then (G n H)^ = G^ U H^. 
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Proof. By contravariance, we have C (G n H)-"- and H-*- C (G n H)-*-. It remains to show 
(G n H)-'- C G^ U H^. Let </) e (G n H)-"-. If ^ = then 4> belongs to any behaviour, and hence a 
fortiori to G^ UH^. So we can suppose that (j) starts with a positive action. For any pair of incarnated 
designs V'l G G and 1/^2 G H, we have (cf. above) i/'i U 1/^2 G G n H, and hence 0-L('0i U i/'2)- Then 0's 
initial action (+,^,/) matches an initial action of (exclusively) either ■01 or say, not of -02: then 
all normalizatiojn takes place in 0i, so we have in fact ^-L'i/'i- Now we can let ipi vary over |G| while 
keeping 02 fixed. Then we have 0_L'0 for all G |G|, that is, e |G|-'^, and we conclude by Lemma 

E2 □ 

Definition 5.7 (Additive connectives) // G and H are two disjoint negative (resp. positive) 
behaviours, we rehaptize their intersection (resp. union) in the sense of definition \5.3[ as follows: 
G n H G&H (resp. G|JH = G®Hj. 

Proposition 5.8 // G and H are negative and disjoint, then |G&H| « |G| x |H|. 

Proof. We have constructed above a mapping from |G| x |H| to G n H, which takes ipi and 02 and 
returns 0i U 02- This design is incarnated, since the whole of "01 is visited by normalisation against 
the designs of G"*" (which are a fortiori designs of (G fl H)-'-), and similarly for ■02- Hence we have 
defined a map from |G| x |H| to |G n H|. This map is injective by the disjointness assumption. We 
are left to show that it is surjective. Let be an incarnated design of G n H, Then, by Lemma [5.61 
we can write = t/ii U -02 , where, say, 0i = | G (where 'ij:^ is the part of -0 visited during 

the normalization of (0 | -0)), which is incarnated in G. □ 

Remark 5.9 Note that the cartesian product is associative only up to isomorphism, while intersection 
is isomorphic up to equality. Girard points out that a way to get a better match is to redefine the product 
of two disjoint sets X and Y as follows: X xY ~ {xUy \ x £ X and y G Y}. Note that this definition 
makes also sense when the condition on X and Y is not satisfied, but one then does not obtain a 
product (in the category of sets) of X and Y anymore. 

The ® connective has also a remarkable property: one can get rid of the bi-orthogonal. Moreover, 
it is also a union at the level of incarnations (see Exercise 15. 13(1 . 

Proposition 5.10 Let G and H be positive and disjoint behaviours. Then G © H is simply the set 
union of G and H. 

Proof. This is an immediate consequence of Lemma [5 .61 

G U H = G^^ U H^^ = (G-L n H-L)^ = (G U H)^^ . 

□ 

Remark 5.11 Girard calls internal completeness the situation when a new behaviour can be defined 
from other behaviours without using a bi-orthogonal. Indeed, given a set A of designs, the set A-^ can 
be viewed as the set of the (counter-)models of A, and then A being closed under bi-orthogonal means 
that everything valid was already there. 
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What if two behaviours are not disjoint? Then we can still form a & or a (B, provided we force 
disjunction by copying the behaviours, or delocating them, as Girard says (see Exercises 15.141 and 

Km . 

But intersections are not less useful than products. They have been introduced long ago in the 
study of models of untyped A-calculi |15[ I44|. and have been used to give semantic foundations to 
object-oriented programming (see, e.g. j39| ) . We show here a simple example of how records can 
be encoded as designs, and how they can be observed by suitable behaviours. Let us consider three 
fields: radius, angle, colour. Assuming that we have fixed an origin and two orthogonal vectors of 
equal norm, then giving a positive number r as radius and a positive number (p (mod 360) gives us a 
point in the plane, while giving an r and a coulour, say, blue, gives us a blue circle. If the three fields 
are given a value, then we get a couloured point. To encode these simple data, we shall use negative 
designs (recall that & is a negative connective), on base e h. Let /i,/2,^3 be arbirtrary ramifications 
(i.e., finite subsets of lu), which are pairwise distinct, for example, Ii = {ii},l2 = {12}, I3 ~ {*3} 
with Ji,Z2,«3 distinct. We shall use them to encode the three fields radius, angle, and colour, 
respectively. Here is a red point on the horizontal axis, negative side, at distance 2 from the origin 
(yes, we encode here only denumerably many points..., and, say, red is encoded by 9): 

V' = {(-,£, {«i}) (+,n, {2}) • {^/cun/c^is}, 

(-, e, {j2}) (+, 42, {180}) • {S'A:MnA;,2^(i8o)}, 
(-, e, {ia}) (+, Z3, {9}) • {Skunki^%\} 

Suppose that we are only interested in the underlying red circle (centered at the origin) - yes, with 
this representation, the type of points is a subtype of the type of circles centered at the origin: we 
simply forget the angle component. Formally, we define the following behaviour G of coloured circles: 

G = {(+,e,{*i}).{I)azr}, (+,e,{z3}).{I)az-}}^. 

We have IV-Ig = {(-, e, {ii}) (+, ii, {2}) • {5A;wnA:i,2} , (-, e, {^3}) (+, «3, {9}) • {5'fcunfc,;39}}. One 
could similarly define the behaviour G' of (uncoloured) points. Then G fl G' is the behaviour of 
coloured points, and this behaviour is not a product. We could also define the behaviours Gi and G2 
of circles and colours, respectively, and then we recover G as the intersection of Gi and G2, which 
in this case is a product. 

There is more material in |35| and in |51| . to which we refer for further reading: 

• In Indies, one can define different sorts of commutative and non-commutative tensor products 
of designs and of behaviours. The basic idea is to glue two positive designs (p\ and 02 starting 
respectively with (+,^,/) and (+,^, J) into a design starting with (+,^,/U J), the problem 
being what to do on / H J: the non-commutative versions give priority to one of the designs, 
while the commutative versions place uniformly ± (resp. ^) after all actions (— ,^fc, L), where 
/c G / n J. The degenerate cases of the definition (tensoring with Fid) are a bit tricky, and have 
led Maurel to introduce an additional design, called negative divergence (see |51)'). 

• Ludics suggests new kinds of quantifications, in a vein similar to what we have seen for additives. 

• Girard proves a full completeness result for a polarized version of MALL (cf. section O with 
quantifiers. To this aim, behaviours must be enriched with partial equivalence relations, to cope 
with the uniform, or parametric nature of proofs (think of axiom h X, as parametric in the 
atom X). 
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• Exponentials can be handled by introducing a quantitative framework, where positive actions 
in designs are combined through formal probability trees: probabilities allow us to count repeti- 
tions, and to lift the separation property to a framework of designs with repetition and pointers 
(see in])- 

Exercise 5.12 Show that two positive behaviours are disjoint if and only if their set intersection is 
{*^}, and that two negative behaviours G and G' are disjoint if and only if for all tp ^ G and ip' £ G' 
we have I-^Ig H j-^'lc = (as sets of chronicles). 

Exercise 5.13 Show that if G and H are positive and disjoint, then |G ® H| = |G| U |H|. 

Exercise 5.14 What conditions should a function 9 from addresses to addresses satisfy to be such 
that it induces a well defined transformation on designs, replacing every action, say, (+,^,1) with 
(+, 0{^), J) such that * J = {0{S.i) \ i ^ I}? Such a function is called a delocation function. 

Exercise 5.15 Show that for any two behaviours Gi and G2 on the same base, one can find two 
delocation functions 9 1 and 02 such that 0i{Gi) and ^2(^2) are disjoint. 

Exercise 5.16 Show that as operations on behaviours (JJ and © are such that (8) distributes over ©. 
Acknowledgements 

I wish to thank Song Fangmin and the University of Nanjing for an invitation in October 2001, which 
offered me the occasion to give a few lectures on linear logic, and Aldo Ursini and the University 
of Siena for providing most hospitable conditions for me to write this survey article and to give the 
corresponding course. 

References 

[1] M. Abadi, L. Cardelli, P.-L. Curien, and J. -J. Levy, Explicit substitutions. Journal of Functional 
Programming 1(4), 375-416 (1992). 

[2] S. Abramsky and R. Jagadeesan, Games and full completeness for multiplicative linear logic. 
Journal of Symbolic Logic 59, 543-574 (1994). 

[3] S. Abramsky and G. McCusker, Game semantics, in Computational Logic, U. Berger and H. 
Schwichtenberg eds. Springer Verlag (1999). 

[4] R. Amadio and P.-L. Curien, Domains and lambda-calculi, Cambridge University Press (1998). 

[5] J.-M. Andreoli: Logic Programming with Focusing Proofs in Linear Logic. Journal of Logic and 
Compuation 2(3), 297-347 (1992). 

J.-M. Andreoli and R. Pareschi, Linear objects: logical processes with built-in inheritance. New 
Generation Computing 9(3-4), 445-473 (1991). 

[6] A. Asperti, V. Danos, C. Laneve, and L. Regnier, Paths in the lambda-calculus, in Proc. Logic 
in Computer Science 1994. 



46 



[7] A. Aspcrti and S. Gucrrini, The optimal implementation of functional programming languages, 

Cambridge University Press (1998). 

[8] A. Asperti and C. Laneve, Paths, computations and labels in the A-calculus, Thoretical Computer 
Science 142(2), 277-297 (1993). 

[9] P. Baillot, Approches dynamiques en semantique de la logique lineaire: jeux et geometric de 
I'interaction, These de Doctorat, Universite Aix-Marseille II (1999). 

[10] H. Barendregt, M. Coppo, and M. Dezani, A filter lambda model and the completeness of type 
assignment, Journal of Symbolic Logic 48, 931-940 (1983). 

[11] G. Berry and P.-L. Curien, Sequential algorithms on concrete data structures, Theoretical Com- 
puter Science 20, 265-321 (1982). 

[12] K. Bruce and G. Longo, A modest model of records, inheritance and bounded quantification, 
Information and Computation 87, 196-240 (1990). 

[13] L. Cardelli and P. Wegner, On understanding types, data abstraction, and polymorphism. Com- 
puting Surveys 17(4), 471-522 (1985). 

[14] R. Cartwright, P.-L. Curien, and M. Felleisen, Fully abstract models of observably sequential 
languages. Information and Computation 111 (2), 297-401 (1994). 

[15] Coppo, M., Dezani, M.A., and Salic, P., Functional Characterization of some Semantic Equalities 
inside lambda-calculus, ICALP Graz, Lecture Notes in Computer Science, Springer Verlag, 1979. 

[16] P.-L. Curien and H. Herbelin, Computing with abstract Bohm trees. Third Fuji International 
Symposium on Functional and Logic Programming, April 1998, Kyoto, World Scientific (1998) 

[17] P.-L. Curien, Abstract Bohm trees, Mathematical Structures in Computer Science 8(6), 559-591 
(1998). 

[18] P.-L. Curien, G. Plotkin, and G. Winskel, Bistructure models of linear logic, Milner Festschrift, 
MIT Press (1999). 

[19] P.-L. Curien, Sequential algorithms as bistable maps, to appear (2004). 

[20] P.-L. Curien, Symmetry and interactivity in programming. Bulletin of Symbolic Logic 9, 169-180 
(2003). 

[21] V. Danos, La logique lineaire appliquce a I'etude de divers processus de normalization (princi- 
palcmcnt du A-calcul), These de Doctorat, Universite Paris 7 (1990). 

[22] V. Danos and L. Regnier, Local and asynchronous beta-reduction, Proc. of Logic in Computer 
Science 1993. 

[23] V. Danos and L. Regnier, The structure of multiplicatives, Archive for Mathematical Logic 28, 
181-203 (1989). 

[24] C. Faggian, Travelling on designs: ludics dynamics, in Proc. CSL 2002, Lecture Notes in Computer 
Science 2471 (2002). 



47 



[25] C. Faggian and M. Hyland, Designs, disputes and strategies, in Proc. CSL 2002, Lecture Notes 

in Computer Science 2471 (2002). 

[26] C. Faggian, Interactive observability in Indies, in Proc. of ICALP 2004, Lecture Notes in Com- 
puter Science (2004). 

[27] G. Gonthicr, M. Abadi and J.-J. Levy, The geometry of optimal lambda reduction, in Proc. 
Principles of Programming Languages 1992. 

[28] G. Gonthier, M. Abadi and J.-J. Levy, Linear logic without boxes, in Proc. Logic in Computer 
Science 1992. 

[29] J.-Y. Girard, Linear logic. Theoretical Computer Science 50, 1-102 (1987). 

[30] J.-Y. Girard, Geometry of interaction I: interpretation of system F, in Proc. Logic Colloquium 
'88, 221-260, North Holland (1989). 

[31] J.-Y. Girard, A new constructive logic: classical logic. Mathematical Structures in Computer 

Science 1, 255-296 (1991). 

[32] J.-Y. Girard, Linear logic: it's syntax and semantics, in Advances of Linear Logic, J.-Y. Girard, 
Y. Lafont, and L. Regnier eds, Cambridge University Press, 1-42 (1995). 

[33] J.-Y. Girard, On the meaning of logical rules I: syntax vs. semantics, in Computational Logic, U. 
Berger and H. Schwichtenberg eds, 215-272, Nato Series F 165, Springer (1999). 

[34] J.-Y. Girard, On the meaning of logical rules IL multiplicative/additive case, in Foundation of 
Secure Computation, NATO series F 175, 183-212, lOS Press (2000). 

[35] J.-Y. Girard, Locus solum: from the rules of logic to the logic of rules. Mathematical Structures 

in Computer Science 11(3), 301-506 (2001). 

[36] J.-Y. Girard, From foundations to ludics. Bulletin of Symbolic Logic 9, 131-168 (2003). 

[37] S. Guerrini, Correctness of multiplicative proof nets is linear, in Proc. Logic in Computer Science 
1999. 

[38] S. Guerrini and A. Masini, Parsing MELL proof nets, Theoretical Computer Science 254 (1-2), 
317-335 (2001).. 

[39] Theoretical aspects of object-oriented proigramming: types, semantics, and language design, C. 
Gunter and J. Mitchell eds., MIT Press (1994). 

[40] R. Hindley, The completeness theorem for typing lambda-terms. Theoretical Computer Science 
22, 1-17 (1983). 

[41] G. Huet and D. Oppcn, Equations and Rewrite Rules: a Survey, in Formal Language Theory: 
Perspectives and Open Problems, R. Book (ed.), Academic Press, 349-405 (1980). 

[42] D. Hughes and R. van Glabbeek, Proof nets for unit-free multiplicative-additive linear logic, in 
Proc. Logic in Computer Science (2003). 



48 



[43] M. Hyland and L. Ong, On Full Abstraction for PCF, Information and Computation 163, 285-408 

(2000). 

[44] J.-L. Krivine, Lambda-calculus, types and models, Ellis Horwood (1993). 

[45] J. Laird, Bistability: an extcnsional characterization of sequentiality, in Proc. Computer Science 
Logic 2003, Springer LNCS 2803 (2003). 

[46] J. Lamping, An algorithm for optimal lambda calculus reduction. Proc. Principles of Program- 
ming Languages 1990, 16-30. 

[47] O. Laurent, Etude de la polarisation en logique, PhD Thesis, Universite Aix-Marseille II (2002). 

[48] O. Laurent, Classical isomorphisms of types, to appear in Mathematical Structures in Computer 
Science (2004). 

[49] O. Laurent, A proof of the focalization property of linear logic, draft (2003). 

[50] J. -J. Levy, Optimal reductions in the lambda-calculus, in To H.B. Curry: Essays in Combinatory 
Logic, Lambda Calculus and Formalism, J. Seldin and R. Hindley eds, 159-191, Academic Press 
(1980). 

[51] F. Maurel, Un cadre quantitatif pour la ludique, PhD Thesis, Paris 7 Univ. (2004). 

[52] J. Mitchell, Polymorphic type inference and containment, Information and Computation 76, 211- 

249 (1988). 

[53] L. Rcgnicr, Lambda-calcul et reseaux, These do Doctorat, Universite Paris 7 (1992). 

[54] A. Saurin, A note on focalization property and synthetic connectives, draft (2004). 

[55] L. Tortora de Falco, Additives of linear logic and normalization - Part I: a (restricted) Church- 
Rosser property, Theoretical Computer Science 294 (3), 489-524 (2003). 



49 



